CONSTANTS
  Pods = {p1, p2, p3}
  None = None
  MaxGen = 4
SPECIFICATION Spec
INVARIANTS
  TypeOK
  Inv_SingleAuthority
  Inv_Monotonic
  Inv_SlotRulesSafe
  Inv_LeaseGenGrounded