CONSTANTS
  Participants = {p1, p2, p3}
  Nil = Nil
  MaxTxnId = 3

INIT Init
NEXT Next

CHECK_DEADLOCK FALSE

INVARIANTS
  TypeOk
  Atomicity
  NoOrphanBlocks
  CoordinatorConsistency
  NoDecideWithoutConsensus
  ParticipantStateValid
  RecoveryConsistency