CONSTANTS Participants = {p1, p2, p3} Nil = Nil MaxTxnId = 3 SPECIFICATION Spec CHECK_DEADLOCK FALSE INVARIANTS TypeOk Atomicity NoOrphanBlocks CoordinatorConsistency NoDecideWithoutConsensus ParticipantStateValid RecoveryConsistency SYMMETRY Symmetry