<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta>
      <journal-title-group>
        <journal-title>Workshop on Artificial Intelligence and Formal Verification, Logics, Automata and Synthesis (OVERLAY),
Rende, Italy, November</journal-title>
      </journal-title-group>
    </journal-meta>
    <article-meta>
      <title-group>
        <article-title>Strong Controllability of Temporal Networks with Decisions</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Matteo Zavatteri</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Romeo Rizzi</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Tiziano Villa</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>Introduction: A Hierarchy of Simple Temporal Networks</institution>
        </aff>
        <aff id="aff1">
          <label>1</label>
          <institution>University of Verona</institution>
          ,
          <country country="IT">Italy</country>
        </aff>
      </contrib-group>
      <pub-date>
        <year>2019</year>
      </pub-date>
      <volume>1</volume>
      <fpage>9</fpage>
      <lpage>20</lpage>
      <abstract>
        <p>A number of extensions of simple temporal networks have been proposed over the last years to face several sources of uncertainty, either in isolation or simultaneously. This paper focuses on a hierarchy of simple temporal networks where the top-level formalism is that of conditional simple temporal networks with uncertainty and decisions (CSTNUDs), a formalism dealing with controllable and uncontrollable durations and controllable and uncontrollable conditional constraints simultaneously. We propose an algorithm to check strong controllability of CSTNUDs. We prove that strong controllability of temporal networks in this hierarchy is NP-complete if controllable conditional constraints are considered.</p>
      </abstract>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>-</title>
      <p>STNUs model temporal plans with uncontrollable (but bounded) durations. STNUs (and all other
formalisms specifying uncontrollable parts) bring with them three main notions of controllability: weak,
strong and dynamic. Weak controllability is when, for each combination of uncontrollable parts known
in advance, there exists a way to operate on the controllable part satisfying all constraints. Strong
controllability is the opposite case and says that there exists a way to operate on the controllable part
satisfying all constraints no matter what will happen. Dynamic controllability requires the existence of a
strategy refining how we operate on the controllable part in real time depending on what is going on.</p>
      <p>
        STNUs do not specify controllable nor uncontrollable conditional constraints. To model uncontrollable
conditional constraints in isolation, the formalism of CSTNs [
        <xref ref-type="bibr" rid="ref13">13</xref>
        ] (formerly conditional temporal problem
(CTP, [
        <xref ref-type="bibr" rid="ref17">17</xref>
        ])) was proposed and subsequently extended to the formalism of CSTNUs [
        <xref ref-type="bibr" rid="ref12 ref13">12, 13</xref>
        ] in order
to augment CSTNs with uncontrollable durations. Conditionals are expressed as labels, conjunctions of
literals over a finite set of Boolean variables saying when the components labeled by them are relevant.
Initially, labels were on both time points and constraints but later it was proved that having labels on
constraints only does not limit the expressiveness of the network [
        <xref ref-type="bibr" rid="ref3">3</xref>
        ]. Temporal networks with labels on
constraints only are called streamlined. In what follows, we will only consider streamlined networks.
      </p>
      <p>Let B = {a, b, . . . , z} be a finite set of Boolean variables, a label ` = λ1 . . . λn is any finite conjunction
of literals λi over the variables in B (we omit the ∧ connective to ease reading). The empty label is denoted
by . The label universe of B, denoted by B∗, is the set of all possible (consistent) labels drawn from
B. For instance, if B = {a, b}, then B∗ = { , a, b, ¬a, ¬b, ab, a¬b, ¬ab, ¬a¬b}. Two labels `1, `2 ∈ B∗ are
consistent if and only if their conjunction `1`2 is satisfiable.</p>
      <p>Definition 3 (CSTN/CSTNU). A conditional simple temporal network (CSTN) is a tuple hT , O, B, O, Ci
extending an STN with a finite set of observation time points O ⊆ T = {A?, . . . , Z?}, a finite set of
Boolean variables B, a bijection O : B → O assigning a unique Boolean variable to each observation
point (we write O−1 : O → B for the inverse), and turning C into a finite set of conditional constraints
` → Y − X ≤ k each meaning that if ` is true, then Y − X ≤ k must hold, with ` ∈ B∗, Y, X ∈ T and
k ∈ R. Once we execute an observation time point A?, Nature sets instantaneously the uncontrollable
truth value of the associated Boolean variable O−1(A?) = a. A conditional simple temporal network with
uncertainty (CSTNU) is a tuple hT , O, B, O, L, Ci extending a CSTN with a finite set of contingent links.</p>
      <p>
        CSTNUs deal with controllable and uncontrollable durations and uncontrollable conditionals
simultaneously. However, they fail to model controllable conditionals. To bridge this gap conditional simple
temporal network with uncertainty and decisions (CSTNUDs, [
        <xref ref-type="bibr" rid="ref19 ref27">19, 27</xref>
        ]) were recently proposed.
Definition 4 (CSTNUD). A conditional simple temporal network with uncertainty and decisions
(CSTNUD) is a tuple hT , O, D, B, O, L, Ci, extending a CSTNU with a finite set of decision time points
D = {D!, . . . , Z!} and in which the set of Boolean variables B is partitioned in two disjoint subsets
BD ∪ BO, representing the set of controllable and uncontrollable Boolean variables, respectively. The
mapping O is turned into a bijection O : B → O ∪ D. Once we execute a decision time point D!, we
also set instantaneously the controllable truth value of the associated Boolean variable O−1(D!) = d. A
CSTNUD where L = ∅ is a conditional simple temporal network with decisions (CSTND, [
        <xref ref-type="bibr" rid="ref19 ref2 ref27">2, 19, 27</xref>
        ]). A
CSTNUD where O = ∅ is a simple temporal network with uncertainty and decisions (STNUD, [
        <xref ref-type="bibr" rid="ref19 ref27">19, 27</xref>
        ]).
A CSTNUD where L = O = ∅ is a simple temporal network with decisions (STND, [
        <xref ref-type="bibr" rid="ref19 ref2 ref27">2, 19, 27</xref>
        ]).
      </p>
      <p>Fig. 1a shows such a hierarchy. We graphically represent temporal networks as directed graphs whose
sets of nodes coincide with the set of time points (decision and observation time points are suffixed with !
and ?, respectively). A double red edge A ⇒ C labeled by [x, y] models a contingent links (A, x, y, C).
An edge X → Y labeled by hk, `i models a constraint ` → Y − X ≤ k. If ` = we just use k as a label.
2</p>
      <p>
        Strong Controllability of CSTNUDs: Super Projections
Strong controllability of STNUs, CSTNs and CSTNUs is in P [
        <xref ref-type="bibr" rid="ref1 ref17 ref18">1, 17, 18</xref>
        ] and boils down to check the
consistency of a reduced STN. For STNUs the algorithm in [
        <xref ref-type="bibr" rid="ref18">18</xref>
        ] computes an STN by “rewriting” all
constraints involving contingent time points as constraints involving the corresponding activation only. For
CSTNs the algorithm in [
        <xref ref-type="bibr" rid="ref17">17</xref>
        ] checks consistency of the underlying STN ignoring all labels. For CSTNUs
      </p>
      <p>
        CSTNUD
STNUD
−5
−5
both methods are applied one after the other: first conditionals, then contingent links [
        <xref ref-type="bibr" rid="ref1">1</xref>
        ]. In this section
we propose an alternative (simpler reduction) to check strong controllability of STNUs and then we
extend it to CSTNUDs as an initial approach. Consider the STNU in Fig. 1b. That network is strongly
controllable. A strong schedule is t(B) = 0, t(D) = 1, t(A) = 4 because if the contingent link (A, 2, 4, C)
takes its minimal duration, then C will occur at t(C) = t(A) + 2 = 6 and the constraint requiring that
C happens at least 5 since D will be satisfied. We claim that an STNU is strongly controllable iff its
super-projection is consistent. The super-projection is an STN obtained by applying the simple local
substitution reduction illustrated in Fig. 1c. The super-projection is constructed as follows. We generate
an STN whose set of time points consists of all non-contingent time points of the original STNU plus as
many pairs of time points Cm and CM as the number of contingent time points C in the original STNU.
The set of constraints is generated as follows. All original constraints not involving contingent time points
belong to this STN. For each contingent link (A, x, y, C) in the original STNU, we add four constraints
Cm − A ≤ x, A − Cm ≤ −x, CM − A ≤ y, A − CM ≤ −y in order to enforce that the corresponding Cm
and CM are executed exactly x and y after A, respectively. Each original constraint involving a contingent
time point C is duplicated in a pair of constraints: one involving Cm and the other involving CM . To give
an example, consider Fig. 1b and note that the original (A, 2, 4, C) is modeled in Fig. 1c by a triple of
time points A, Cm and CM plus Cm − A ≤ 2, A − Cm ≤ −2, CM − A ≤ 4, A − CM ≤ −4 and that the
original constraint D − C ≤ −5 is modeled by D − Cm ≤ −5 and D − CM ≤ −5. Algorithm 3 extends this
reduction in order to deal with STNUDs. To patch it for getting StnuSP(N ) we make these modifications.
The input and output become “An STNU N = hT , L, Ci” and “The STN super-projection N ∗ = hT ∗, C∗i”.
Lines 8-11 remain the same without any “` →” (note that line 7 omits “ →” on constraints rewriting
contingent links). The return statement becomes hT ∗, C∗i.
      </p>
      <p>Theorem 1. Any STNU is strongly controllable if and only if its super-projection is consistent.
Proof. Let N = hT , L, Ci be any STNU and N ∗ = hT ∗, C∗i its super-projection. Assume that N is
strongly controllable. Let TX = T ∩ T ∗ be the set of non-contingent time points and let TC = T \ TX
be the set of contingent time points N . Let t : TX 7→ R be a feasible scheduling of N (i.e., a scheduling
satisfying all constraints no matter which durations Nature chooses for contingent links). Let t∗ be the
extension of t on the new domain T ∗ (i.e., set of time points of N ∗) defined by the following three rules:
Rule 1: t∗ is an extension of t, thus, for each non-contingent time point X ∈ TX , t∗(X) = t(X).
Rule 2: if X = Cm for some contingent node C ∈ TC, then t∗(X) = t(act(C)) + L(C).
Rule 3: if X = CM for some contingent node C ∈ TC, then t∗(X) = t(act(C)) + U (C).
where act(C ) is the activation time point of C (in the original STNU) and L() and U () are the lower and
upper bound vectors on the delays of contingent time points (i.e., all minimal and all maximal durations).
Fact 1 For each constraint Y − X ≤ k ∈ C where Y and X are not contingent time points, then
Y − X ≤ k ∈ C∗. t(Y ) − t(X) ≤ k holds by assumption and since by Rule 1 t(Y ) = t∗(Y ) and
t(X) = t∗(X), then t∗(Y ) − t∗(X) ≤ k holds as well.</p>
      <p>Fact 2 For each contingent link (A, x, y, C) ∈ L, t∗(Cm) ≤ t(C) ≤ t∗(CM ) because of Rules 2 and 3.
Fact 3 For each constraint X − C ≤ −k ∈ C, with C a contingent time point, t(X) − t(C) ≤ −k holds
by assumption and t∗(X) − t∗(Cm) ≤ −k and t∗(X) − t∗(CM ) ≤ −k hold because of Fact 2.
Fact 4 For each constraint C − X ≤ k ∈ C, with C a contingent time point, t(C) − t(X) ≤ k holds by
assumption and t∗(Cm) − t∗(X) ≤ k and t∗(CM ) − t∗(X) ≤ k hold because of Fact 2.
Therefore, if t is a feasible schedule for N , then t∗ is a feasible schedule for N ∗ (Facts 1,2,3 and 4).</p>
      <p>Likewise, if t∗ is a feasible schedule for N ∗, then t∗|X is a feasible schedule for N , where t∗|X is the
projection of t∗ over the non-contingent time points of N . Indeed, let d : TC → R be a delay vector
assigning a duration to each contingent time point C ∈ TC. For every possible delay vector d and for every
possible contingent time point C of N , it holds that t(Cm) = t(act(C)) + L(C) ≤ t(act(C)) + d(C) ≤
t(act(C )) + L(C) = t(CM ) since L ≤ d ≤ U . That is, we only need to cope with delay vectors which are
sandwiched in-between the lower bound vector and the upper bound vector. Without loss of generality
consider a binary constraint Y − C ≤ k involving C in the original STNU N . Since t∗(Y ) − t∗(Cm) ≤ k
and t∗(Y ) − t∗(CM ) ≤ k hold, then the original t(Y ) − t(C) ≤ k holds as well.</p>
      <p>Likewise, a CSTNUD is strongly controllable if and only if its STND super projection is consistent
(the proof extends that of Theorem 1 to accommodate uncontrollable conditionals as well).</p>
      <p>
        Algorithm 1 provides an approach to solve strong controllability of CSTNUDs. Algorithm 1 first
applies Algorithm 2 to get rid of uncontrollable conditional constraints, then applies Algorithm 3 to
rewrite contingent links maintaining controllable conditional constraints and finally calls a StndSolver
(see [
        <xref ref-type="bibr" rid="ref23">23</xref>
        ] for some possible algorithms) to check consistency of the STND super-projection (i.e., to find a
truth value assignment to the controllable Boolean variables such that the STN-projection according to
that assignment is consistent). Due to lack of space we only show a graphical execution of Algorithm 1
that starting on the input Fig. 1d, first removes uncontrollable conditionals getting Fig. 1e, then rewrites
contingent links getting Fig. 1f and finally returns a solution for Fig. 1h which is the only consistent
STND-projection (note the negative loop between B and D in Fig. 1g, the STND-projection according to
d). Thus, we fix ¬d as a decision and get the strong schedule t(B) = 0, t(D) = 2, t(A) = 5 for Fig. 1d.
      </p>
      <p>Algorithm 1: CstnudStrongSchedule(N )</p>
      <p>Input: A CSTNUD N = hT , O, D, B, O, L, Ci</p>
      <p>Output: A strong temporal plan
1 return StndSolver(StnudSP(CstnudSP(N )))</p>
    </sec>
    <sec id="sec-2">
      <title>Algorithm 2: CstnudSP(N )</title>
      <p>IOnuptuptu: tA: TChSeTSNTUNDUND s=upheTr-,pOro,Djec,tBio,nO,NL∗, Ci
1 for a ∈ BD do
2 O∗(a) = O(a)
3 C∗ ← ∅
4 for ` → Y − X ≤ k ∈ C do
5 Let `D be ` without literals over vars in BO
6 C∗ = C∗ ∪ {`D → Yi − Xi ≤ k}
7 return hT , D, BD, O∗, L, C∗i</p>
    </sec>
    <sec id="sec-3">
      <title>Algorithm 3: StnudSP(N )</title>
      <p>IOnuptuptu: tA:nThSeTNSTUNDDNsu=pehrT-p,rDoj,eBc,tiOon,LN, C∗i
1 T ∗ ← ∅, C∗ ← ∅
2 for X ∈ T do
3 if X is non-contingent then Δ(X) = {X} ;
4 else Δ(X) = {Xm, XM } ;
5 T ∗ ← T ∗ ∪ Δ(X)
6 for (A, x, y, C) ∈ L do
7 C∗ ← C∗ ∪ {Cm − Ai ≤ x, Ai − Cm ≤ −x,</p>
      <p>
        CM − Ai ≤ y, Ai − CM ≤ −y}
8 for ` → Y − X ≤ k ∈ C do
9 for Yi ∈ Δ(Y ) do
10 for Xi ∈ Δ(X) do
11 C∗ ← C∗ ∪ {` → Yi − Xi ≤ k}
12 return hT ∗, D, B, O, C∗i
Theorem 2. Strong controllability of STNUDs, CSTNDs and CSTNUDs is NP-complete.
Proof. Hardness: Consequence of the fact that deciding consistency of STNDs is NP-hard and it is a
special case of deciding strong controllability of STNUDs, CSTNDs and CSTNUDs (when L = ∅, O = ∅
and L = O = ∅, respectively). Membership: Regardless of the formalism, a certificate of YES consists
of a truth value assignment s for BD and a schedule t for TX (set of non-contingent time points). To verify
it we use the reductions in Algorithm 2 to get rid of BO (if 6= ∅) and Algorithm 3 to rewrite L (if 6= ∅). If
L 6= ∅, then for each (A, x, y, C) ∈ L, t(Cm) = t(A) + x and t(CM ) = t(A) + y. Finally, we verify that
(s, t) is a YES certificate for the resulting STNDs. We know that this check is polynomial [
        <xref ref-type="bibr" rid="ref2">2</xref>
        ].
3
      </p>
      <p>Conclusions and Future Work
We provided a simple approach to check strong controllability of CSTNUDs based on an elementary local
reduction. The resulting algorithm’s running time is upper bounded by (i) the product of a low-degree
polynomial where the magnitude of the numbers does not occur and (ii) a singly exponential term of the
form 2|D|, where D is the set of binary decisions. With small modifications the algorithm we gave can be
adapted to all formalisms in Fig. 1a. The idea is to reduce a strong controllability problem to a consistency
problem by computing super-projections. All formalisms in Fig. 1a are reducible to their super-projections
in polynomial time. Strong controllability of STNUDs, CSTNDs, CSTNUDs is NP-complete.</p>
      <p>
        As future work, we plan to deepen research on complexity of strong controllability for these and
for other classes of (temporal)-constraint networks such as those discussed (or employed) in [
        <xref ref-type="bibr" rid="ref10 ref20 ref21 ref22 ref24 ref25 ref26 ref28 ref29 ref8 ref9">8, 9, 10,
20, 21, 22, 24, 25, 26, 28, 29</xref>
        ] other than comparing with strong controllability of disjunctive formalisms
[
        <xref ref-type="bibr" rid="ref15 ref4 ref5 ref6 ref7">4, 5, 6, 7, 15</xref>
        ]. Also, a line of research started in [
        <xref ref-type="bibr" rid="ref16">16</xref>
        ] provided an approach for the optimal design of
consistent STNs. Considering the new way to compute a super-projection of an STNU, this line of research
can be extended to provide an approach for the optimal design of strongly controllable STNUs.
      </p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          [1]
          <string-name>
            <given-names>N.</given-names>
            <surname>Bhargava</surname>
          </string-name>
          and
          <string-name>
            <given-names>B. C.</given-names>
            <surname>Williams</surname>
          </string-name>
          .
          <article-title>Complexity bounds for the controllability of temporal networks with conditions, disjunctions, and uncertainty</article-title>
          .
          <source>Artificial Intelligence</source>
          ,
          <volume>271</volume>
          :
          <fpage>1</fpage>
          -
          <lpage>17</lpage>
          ,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          [2]
          <string-name>
            <given-names>M.</given-names>
            <surname>Cairo</surname>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Comin</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L.</given-names>
            <surname>Hunsberger</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Rizzi</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          .
          <article-title>Incorporating decision nodes into conditional simple temporal networks</article-title>
          .
          <source>In TIME</source>
          <year>2017</year>
          , volume
          <volume>90</volume>
          <source>of LIPIcs</source>
          , pages
          <volume>9</volume>
          :
          <fpage>1</fpage>
          -
          <lpage>9</lpage>
          :
          <fpage>17</fpage>
          .
          <string-name>
            <surname>Schloss</surname>
          </string-name>
          Dagstuhl-Leibniz-Zentrum fuer Informatik,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          [3]
          <string-name>
            <given-names>M.</given-names>
            <surname>Cairo</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L.</given-names>
            <surname>Hunsberger</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          , and
          <string-name>
            <given-names>R.</given-names>
            <surname>Rizzi</surname>
          </string-name>
          .
          <article-title>A streamlined model of conditional simple temporal networks - semantics and equivalence results</article-title>
          .
          <source>In TIME</source>
          <year>2017</year>
          , volume
          <volume>90</volume>
          <source>of LIPIcs</source>
          , pages
          <volume>10</volume>
          :
          <fpage>1</fpage>
          -
          <lpage>10</lpage>
          :
          <fpage>19</fpage>
          .
          <string-name>
            <surname>Schloss</surname>
          </string-name>
          Dagstuhl-Leibniz-Zentrum fuer Informatik,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          [4]
          <string-name>
            <given-names>A.</given-names>
            <surname>Cimatti</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Do</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Micheli</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Roveri</surname>
          </string-name>
          , and
          <string-name>
            <given-names>D. E.</given-names>
            <surname>Smith.</surname>
          </string-name>
          <article-title>Strong temporal planning with uncontrollable durations</article-title>
          .
          <source>Artificial Intelligence</source>
          ,
          <volume>256</volume>
          :
          <fpage>1</fpage>
          -
          <lpage>34</lpage>
          ,
          <year>2018</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          [5]
          <string-name>
            <given-names>A.</given-names>
            <surname>Cimatti</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L.</given-names>
            <surname>Hunsberger</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Micheli</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Roveri</surname>
          </string-name>
          .
          <article-title>Sound and complete algorithms for checking the dynamic controllability of temporal networks with uncertainty, disjunction and observation</article-title>
          .
          <source>In TIME 2014</source>
          , pages
          <fpage>27</fpage>
          -
          <lpage>36</lpage>
          . IEEE CPS,
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          [6]
          <string-name>
            <given-names>A.</given-names>
            <surname>Cimatti</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L.</given-names>
            <surname>Hunsberger</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Micheli</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Roveri</surname>
          </string-name>
          .
          <article-title>Dynamic controllability via timed game automata</article-title>
          .
          <source>Acta Informatica</source>
          ,
          <volume>53</volume>
          (
          <issue>6-8</issue>
          ):
          <fpage>681</fpage>
          -
          <lpage>722</lpage>
          ,
          <year>2016</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          [7]
          <string-name>
            <given-names>A.</given-names>
            <surname>Cimatti</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Micheli</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Roveri</surname>
          </string-name>
          .
          <article-title>Dynamic controllability of disjunctive temporal networks: Validation and synthesis of executable strategies</article-title>
          .
          <source>In AAAI 2013</source>
          , pages
          <fpage>3116</fpage>
          -
          <lpage>3122</lpage>
          . AAAI Press,
          <year>2016</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          [8]
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          .
          <article-title>Access controlled temporal networks</article-title>
          .
          <source>In ICAART 2017</source>
          , pages
          <fpage>118</fpage>
          -
          <lpage>131</lpage>
          . INSTICC, ScitePress,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          [9]
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          .
          <article-title>Conditional simple temporal networks with uncertainty and resources</article-title>
          .
          <source>Journal of Artificial Intelligence Research</source>
          ,
          <volume>64</volume>
          :
          <fpage>931</fpage>
          -
          <lpage>985</lpage>
          ,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          [10]
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          .
          <article-title>Security constraints in temporal role-based access-controlled workflows</article-title>
          .
          <source>In CODASPY 2016</source>
          , pages
          <fpage>207</fpage>
          -
          <lpage>218</lpage>
          . ACM,
          <year>2016</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          [11]
          <string-name>
            <given-names>R.</given-names>
            <surname>Dechter</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Meiri</surname>
          </string-name>
          , and
          <string-name>
            <given-names>J.</given-names>
            <surname>Pearl</surname>
          </string-name>
          .
          <article-title>Temporal constraint networks</article-title>
          .
          <source>Artif. Intell.</source>
          ,
          <volume>49</volume>
          (
          <issue>1-3</issue>
          ):
          <fpage>61</fpage>
          -
          <lpage>95</lpage>
          ,
          <year>1991</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          [12]
          <string-name>
            <given-names>L.</given-names>
            <surname>Hunsberger</surname>
          </string-name>
          and
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          .
          <article-title>Sound-and-complete algorithms for checking the dynamic controllability of conditional simple temporal networks with uncertainty</article-title>
          .
          <source>In TIME</source>
          <year>2018</year>
          , volume
          <volume>120</volume>
          <source>of LIPIcs</source>
          , pages
          <volume>14</volume>
          :
          <fpage>1</fpage>
          -
          <lpage>14</lpage>
          :
          <fpage>17</fpage>
          .
          <string-name>
            <surname>Schloss</surname>
          </string-name>
          Dagstuhl - Leibniz-Zentrum fuer Informatik,
          <year>2018</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref13">
        <mixed-citation>
          [13]
          <string-name>
            <given-names>L.</given-names>
            <surname>Hunsberger</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          , and
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          .
          <article-title>The Dynamic Controllability of Conditional STNs with Uncertainty</article-title>
          .
          <source>In PlanEx at ICAPS-2012</source>
          , pages
          <fpage>1</fpage>
          -
          <lpage>8</lpage>
          ,
          <year>2012</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref14">
        <mixed-citation>
          [14]
          <string-name>
            <given-names>L.</given-names>
            <surname>Hunsberger</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          , and
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          .
          <article-title>A sound-and-complete propagation-based algorithm for checking the dynamic consistency of conditional simple temporal networks</article-title>
          .
          <source>In TIME 2015</source>
          , pages
          <fpage>4</fpage>
          -
          <lpage>18</lpage>
          . IEEE CPS,
          <year>2015</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref15">
        <mixed-citation>
          [15]
          <string-name>
            <given-names>A.</given-names>
            <surname>Micheli</surname>
          </string-name>
          .
          <article-title>Disjunctive temporal networks with uncertainty via SMT: recent results and directions</article-title>
          .
          <source>Intelligenza Artificiale</source>
          ,
          <volume>11</volume>
          (
          <issue>2</issue>
          ):
          <fpage>155</fpage>
          -
          <lpage>178</lpage>
          ,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref16">
        <mixed-citation>
          [16]
          <string-name>
            <given-names>R.</given-names>
            <surname>Rizzi</surname>
          </string-name>
          and
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          .
          <article-title>Optimal design of consistent simple temporal networks</article-title>
          .
          <source>In TIME 2013</source>
          , pages
          <fpage>19</fpage>
          -
          <lpage>25</lpage>
          . IEEE CPS,
          <year>2013</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref17">
        <mixed-citation>
          [17]
          <string-name>
            <given-names>I.</given-names>
            <surname>Tsamardinos</surname>
          </string-name>
          ,
          <string-name>
            <given-names>T.</given-names>
            <surname>Vidal</surname>
          </string-name>
          , and
          <string-name>
            <surname>M. E. Pollack. CTP:</surname>
          </string-name>
          <article-title>A new constraint-based formalism for conditional, temporal planning</article-title>
          .
          <source>Constraints</source>
          ,
          <volume>8</volume>
          (
          <issue>4</issue>
          ):
          <fpage>365</fpage>
          -
          <lpage>388</lpage>
          ,
          <year>2003</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref18">
        <mixed-citation>
          [18]
          <string-name>
            <given-names>T.</given-names>
            <surname>Vidal</surname>
          </string-name>
          and
          <string-name>
            <given-names>H.</given-names>
            <surname>Fargier</surname>
          </string-name>
          .
          <article-title>Handling contingency in temporal constraint networks: from consistency to controllabilities</article-title>
          .
          <source>Journal of Experimental &amp; Theoretical Artificial Intelligence</source>
          ,
          <volume>11</volume>
          (
          <issue>1</issue>
          ):
          <fpage>23</fpage>
          -
          <lpage>45</lpage>
          ,
          <year>1999</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref19">
        <mixed-citation>
          [19]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          .
          <article-title>Conditional simple temporal networks with uncertainty and decisions</article-title>
          .
          <source>In TIME</source>
          <year>2017</year>
          , volume
          <volume>90</volume>
          <source>of LIPIcs</source>
          , pages
          <volume>23</volume>
          :
          <fpage>1</fpage>
          -
          <lpage>23</lpage>
          :
          <fpage>17</fpage>
          .
          <string-name>
            <surname>Schloss</surname>
          </string-name>
          Dagstuhl-Leibniz-Zentrum fuer Informatik,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref20">
        <mixed-citation>
          [20]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          .
          <article-title>Temporal and Resource Controllability of Workflows Under Uncertainty</article-title>
          .
          <source>PhD thesis</source>
          , University of Verona, Italy,
          <year>2018</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref21">
        <mixed-citation>
          [21]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          .
          <article-title>Temporal and resource controllability of workflows under uncertainty</article-title>
          .
          <source>In Proceedings of the Dissertation Award, Doctoral Consortium, and Demonstration Track at BPM</source>
          <year>2019</year>
          , volume
          <volume>2420</volume>
          <source>of CEUR Workshop Proceedings</source>
          , pages
          <fpage>9</fpage>
          -
          <lpage>14</lpage>
          . CEUR-WS.org,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref22">
        <mixed-citation>
          [22]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          , and
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          .
          <article-title>Weak, strong and dynamic controllability of access-controlled workflows under conditional uncertainty</article-title>
          .
          <source>In BPM 2017</source>
          , pages
          <fpage>235</fpage>
          -
          <lpage>251</lpage>
          . Springer,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref23">
        <mixed-citation>
          [23]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Rizzi</surname>
          </string-name>
          , and
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          .
          <article-title>Hybrid sat-based consistency checking algorithms for simple temporal networks with decisions</article-title>
          .
          <source>In TIME</source>
          <year>2019</year>
          , volume
          <volume>147</volume>
          , page 2:
          <fpage>1</fpage>
          -
          <lpage>2</lpage>
          :
          <fpage>17</fpage>
          .
          <string-name>
            <surname>Schloss</surname>
          </string-name>
          Dagstuhl-Leibniz-Zentrum fuer Informatik,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref24">
        <mixed-citation>
          [24]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          , and
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          .
          <article-title>Resource controllability of workflows under conditional uncertainty</article-title>
          .
          <source>In Business Process Management Workshops</source>
          , pages
          <fpage>68</fpage>
          -
          <lpage>80</lpage>
          . Springer,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref25">
        <mixed-citation>
          [25]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Rizzi</surname>
          </string-name>
          , and
          <string-name>
            <given-names>T.</given-names>
            <surname>Villa</surname>
          </string-name>
          .
          <article-title>Complexity of weak, strong and dynamic controllability of cncus</article-title>
          .
          <source>In OVERLAY</source>
          <year>2019</year>
          (to appear).
          <source>CEUR-WS.org</source>
          ,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref26">
        <mixed-citation>
          [26]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          and
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          .
          <article-title>Constraint networks under conditional uncertainty</article-title>
          .
          <source>In ICAART 2018</source>
          , pages
          <fpage>41</fpage>
          -
          <lpage>52</lpage>
          . SciTePress,
          <year>2018</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref27">
        <mixed-citation>
          [27]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          and
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          .
          <article-title>Conditional simple temporal networks with uncertainty and decisions</article-title>
          .
          <source>Theoretical Computer Science</source>
          ,
          <volume>797</volume>
          :
          <fpage>77</fpage>
          -
          <lpage>101</lpage>
          ,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref28">
        <mixed-citation>
          [28]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          and
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          .
          <article-title>Conditional uncertainty in constraint networks</article-title>
          .
          <source>In Agents and Artificial Intelligence</source>
          , pages
          <fpage>130</fpage>
          -
          <lpage>160</lpage>
          . Springer,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref29">
        <mixed-citation>
          [29]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          and
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          .
          <article-title>Last man standing: Static, decremental and dynamic resiliency via controller synthesis</article-title>
          .
          <source>Journal of Computer Security</source>
          ,
          <volume>27</volume>
          (
          <issue>3</issue>
          ):
          <fpage>343</fpage>
          -
          <lpage>373</lpage>
          ,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>