\* Sanity check of the abstract specification itself: its stated
\* consequences hold, with one client (each property is per client).
SPECIFICATION Spec
CONSTANTS
    Clients = {c1}
    Refs = {main, dev}
    DefaultHead = main
    Oids = {o1, o2}
    NoOid = NoOid
    Absent = Absent
    NoCall = NoCall
    NoOut = NoOut
    NoCmd = NoCmd
    NoResp = NoResp
    Error = Error
    NoEntry = NoEntry
    Owner = Owner
    Manager = Manager
INVARIANT AppliedWasAuthorized
INVARIANT CreditMatchesState
INVARIANT HeadNotDangling
PROPERTY ToldOnlyTheOutcome
PROPERTY NoLostUpdate