format_version: "0.1"
properties:
  - id: P1
    kind: mutual_exclusion
    variables: [feed_valve, discharge_valve]
    justification: "Feed and discharge valves must never be open together; feed requires the vessel confirmed empty."