protocol : THEORY BEGIN File : TYPE = fNONE,ONE,MANYg Msg : TYPE = [# first: bool, last: bool, toggle: bool #] State : TYPE = [# file : File, rn : bool, afile : bool, ... #] The automaton speci cation also changes but this is acceptable since Theorem 1 admits an abstract property pa distinct from the concrete property pc. We omit the details of this new automaton speci cation. In the abstract v...