Abstract:First-order logic, and quantifiers in particular, are widely used in deductive verification. Quantifiers are essential for describing systems with unbounded domains, but prove difficult for automated solvers. Significant effort has been dedicated to finding quantifier instantiations that establish unsatisfiability, thus ensuring validity of a system's verification conditions. However, in many cases the formulas are satisfiable: this is often the case in intermediate steps of the verification process. For such cases, existing tools are limited to finding finite models as counterexamples. Yet, some quantified formulas are satisfiable but only have infinite models. Such infinite counter-models are especially typical when first-order logic is used to approximate inductive definitions such as linked lists or the natural numbers. The inability of solvers to find infinite models makes them diverge in these cases. In this paper, we tackle the problem of finding such infinite models. These models allow the user to identify and fix bugs in the modeling of the system and its properties. Our approach consists of three parts. First, we introduce symbolic structures as a way to represent certain infinite models. Second, we describe an effective model finding procedure that symbolically explores a given family of symbolic structures. Finally, we identify a new decidable fragment of first-order logic that extends and subsumes the many-sorted variant of EPR, where satisfiable formulas always have a model representable by a symbolic structure within a known family. We evaluate our approach on examples from the domains of distributed consensus protocols and of heap-manipulating programs. Our implementation quickly finds infinite counter-models that demonstrate the source of verification failures in a simple way, while SMT solvers and theorem provers such as Z3, cvc5, and Vampire diverge.

Investigating the Existence of Large Sets of Idempotent Quasigroups via Satisfiability Testing.

Investigating the Existence of Costas Latin Squares via Satisfiability Testing

Investigating the Existence of Orthogonal Golf Designs via Satisfiability Testing

Disjoint Projected Enumeration for SAT and SMT without Blocking Clauses

Parallelizing SMT Solving: Lazy Decomposition and Conciliation

Estimating the Volume of Solution Space for Satisfiability Modulo Linear Real Arithmetic

Group Theoretic, Lie Algebraic and Jordan Algebraic Formulations of the SIC Existence Problem

Zeon and Idem-Clifford Formulations of Boolean Satisfiability

Equality Detection for Linear Arithmetic Constraints

Satisfiability and Integer Programming As Complementary Tools

Computing Small Unsatisfiable Cores in Satisfiability Modulo Theories

SMT Solving for the Theory of Ordering Constraints.

HyQSAT: A Hybrid Approach for 3-SAT Problems by Integrating Quantum Annealer with CDCL.

General Method for Solving Four Types of SAT Problems

An Infinite Needle in a Finite Haystack: Finding Infinite Counter-Models in Deductive Verification

Computing and Estimating the Volume of the Solution Space of SMT(LA) Constraints

qSAT: Design of an Efficient Quantum Satisfiability Solver for Hardware Equivalence Checking

Algorithms Transcending the SAT-Symmetry Interface

Hybrid Sat Solver Considering Circuit Observability

Efficient Digital Quadratic Unconstrained Binary Optimization Solvers for SAT Problems

Formal Verification of the Empty Hexagon Number