Init->(MemoryEvent & NonInit) in ^gmo } fact { no iden & ^rel } pred total[rel: Event->Event, bag: Event] { all disj e, f: bag | e->f in rel + ~rel acyclic[rel] } B.2. Formal