Generated SMV - 3
out : {0,fetch,validate};
belief : {valid,invalid,suspect,nofile};
init(belief) := {nofile, suspect};
(belief = nofile) & (input = val) : valid;
(belief = suspect) & (input = val) : valid;
(belief = suspect) & (input = inval) : invalid;
(belief = invalid) & (input = val) : valid;
(belief = nofile) : fetch;
(belief = invalid) : fetch;
(belief = suspect) : validate;