Check out the new USENIX Web site. next up previous
Next: Property 2: grantPoints is Up: Example Properties Previous: Example Properties

Property 1: there are no calls to both grantPoints and grantLoyaltyPoints for the same applet.

For all loyalty applets $ L$ it is the case that a call to $ \mathit{L.grantPoints}$ never triggers a call to $ \mathit{L.grantLoyaltyPoints}$.

\begin{displaymath}
\begin{array}{ll}
\phi_{1.1} \;\stackrel {\Delta}{=}&
loyalt...
...mathsf{triggers}
\\
& loyaltyB.grantLoyaltyPoints
\end{array}\end{displaymath}



Lars-Ake Fredlund 2002-09-23