format_version: "0.1"
properties:
  - id: P1
    kind: invariant
    expression: "!(Done && Reset)"
    justification: "Reset is dominant: the count-up Done flag and Reset never hold together."