// liveness
"init" => P>=1 [ true U ((s1=8) & (s2=7)) | ((s1=7) & (s2=8)) ]