Next: Bibliographical Notes
Up: Weak Refinement
Previous: Weak Refinement
The relational definition of weak refinement, Definition 11.2.1
on page 258, is too strong - both in terms of the subsequent
definitions and in terms of what is desirable. The correct definition
would have
in place of the quantifications over
and
. A
counterexample is a system with 1 visible operation and one internal
one. The abstract internal operation relates the initial state 0 to
and
to
, and in the concrete system relates 0 (initial)
to
or
. The visible operation outputs the state in either
system.
This satisfies our subsequent definitions of weak refinement, and would
be seen as a refinement (the difference between 1 or 2 internal
operations taking place cannot be observable), but does not satisfy
Definition 11.2.1.
E.A.Boiten
2002-11-22