<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Verification of Generic, Relational Transition Systems</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>(Discussion/Short Paper)</string-name>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Diego Calvanese</string-name>
          <email>calvanese@inf.unibz.it</email>
          <xref ref-type="aff" rid="aff0">0</xref>
          <xref ref-type="aff" rid="aff2">2</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Giuseppe De Giacomo</string-name>
          <email>degiacomo@diag.uniroma1.it</email>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Marco Montali</string-name>
          <email>montali@inf.unibz.it</email>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Fabio Patrizi</string-name>
          <email>patrizi@diag.uniroma1.it</email>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>Free University of Bozen-Bolzano</institution>
          ,
          <country country="IT">Italy</country>
        </aff>
        <aff id="aff1">
          <label>1</label>
          <institution>Sapienza University of Rome</institution>
          ,
          <country country="IT">Italy</country>
        </aff>
        <aff id="aff2">
          <label>2</label>
          <institution>Umeå University</institution>
          ,
          <country country="SE">Sweden</country>
        </aff>
      </contrib-group>
      <pub-date>
        <year>2022</year>
      </pub-date>
      <abstract>
        <p>Generic, relational transition systems form an interesting class of infinite-state transition systems that naturally captures the execution semantics of a variety of formalisms expressing processes operating over (relational) data. Examples of such data-aware processes include action theories in the situation calculus in AI and data-centric business processes in BPM. In this extended abstract, we summarize the main body of results produced in a decade-long research program focused on the verification of generic, relational transition systems against properties specified using variants of first-order temporal logics.</p>
      </abstract>
      <kwd-group>
        <kwd>data-aware processes</kwd>
        <kwd>first-order temporal logics</kwd>
        <kwd>verification</kwd>
        <kwd>action theories</kwd>
        <kwd>state-boundedness</kwd>
      </kwd-group>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>1. Introduction</title>
      <p>
        Relational transition systems (RTSs) are infinite-state transition systems whose states are labeled
by first-order (FO) interpretations [
        <xref ref-type="bibr" rid="ref1">1</xref>
        ]. Generic RTSs are RTSs with the property that states with
isomorphic interpretations induce the same transitions modulo renaming of objects [
        <xref ref-type="bibr" rid="ref2 ref3">2, 3</xref>
        ]. This
implies that, whenever the current state has a successor state where new, (locally) fresh objects
are injected, what matters about such fresh objects is only how they relate to each other and to
those already present in the current state. Genericity of an RTS is indeed reminiscent of the
well-known notion of genericity in first-order logic and relational databases [
        <xref ref-type="bibr" rid="ref4">4</xref>
        ].
      </p>
      <p>
        Generic RTSs naturally capture the execution semantics of a variety of dynamic systems
operating over relational data (henceforth called data-aware dynamic systems), which have
been investigated in AI, BPM, and data management. Example of such systems are: (i) action
theories in the Situation Calculus [
        <xref ref-type="bibr" rid="ref5 ref6 ref7">5, 6, 7</xref>
        ], possibly operating over description-logic knowledge
bases [
        <xref ref-type="bibr" rid="ref10 ref11 ref8 ref9">8, 9, 10, 11</xref>
        ]; (ii) multiagent systems with data-aware, interacting agents [
        <xref ref-type="bibr" rid="ref12 ref13 ref14 ref15">12, 13, 14, 15</xref>
        ];
(iii) artifact- and data-centric business processes [
        <xref ref-type="bibr" rid="ref16 ref17 ref18">16, 17, 18</xref>
        ]; (iv) variants of colored Petri nets
where tokens carry (tuples of) data that can be compared by (in)equality [
        <xref ref-type="bibr" rid="ref19 ref20 ref21 ref22">19, 20, 21, 22</xref>
        ].
LGOBE
      </p>
      <p>http://www.inf.unibz.it/~calvanese/ (D. Calvanese); http://www.diag.uniroma1.it/degiacomo/ (G. De Giacomo);</p>
      <p>
        A long series of works has investigated how to analyze these systems, focusing in particular
on verification [
        <xref ref-type="bibr" rid="ref13 ref18 ref23 ref3 ref7">3, 13, 18, 23, 7</xref>
        ] and synthesis (typically, planning) [
        <xref ref-type="bibr" rid="ref11 ref24 ref9">24, 9, 11</xref>
        ]. Notably, properties
of interest have to combine, in this setting, temporal/dynamic operators with the ability of
querying the interpretations contained in the state, in turn making it possible to predicate on
the (un)desired evolution of objects and relations as the system unfolds. Natural candidates to
express such propreties are thus first-order temporal logics.
      </p>
      <p>In this extended abstract, we summarize the main body of results on verification of first-order
temporal logics over generic RTSs that we have obtained in a decade-long research program.</p>
    </sec>
    <sec id="sec-2">
      <title>2. Verification of Generic RTSs</title>
      <p>
        Verification of generic RTSs is undecidable even under severe restrictions on the system dynamics
and on the signature of the FO interpretations. In fact, it is undecidable to even check reachability
of a proposition in data-aware dynamic systems that manipulate two unary relations through
simple actions that can (i) test whether one of the relations is empty, (ii) insert a new object in
one of them, (iii) remove an object from one of them provided that an object exists [
        <xref ref-type="bibr" rid="ref25 ref26">25, 26</xref>
        ].
State-boundedness. In this simple systems, undecidability resides in the ability of the system
to accumulate unboundedly many data in a single state. To control this ability, the notion of
state-boundedness has been introduced in [
        <xref ref-type="bibr" rid="ref12 ref18">12, 18</xref>
        ] and further studied in [
        <xref ref-type="bibr" rid="ref27">27</xref>
        ]. In a state-bounded
RTS, every state contains a bounded number of objects. Infinitely many distinct objects can be
potentially observed along a run, but only boundedly many can be accumulated in each state.
      </p>
      <p>
        State-boundedness is a semantic property, decidable to check for a given bound and
undecidable to check if the bound is not known [
        <xref ref-type="bibr" rid="ref7 ref8">8, 7</xref>
        ]. In this light, diferent data-aware dynamic
systems that provide compact ways of specifying generic RTSs have been studied, with the
aim of identifying classes that guarantee that the corresponding RTS is indeed state-bounded.
This has been done considering: (i) suficient, syntactic conditions over the system
specification [
        <xref ref-type="bibr" rid="ref27 ref8">8, 27</xref>
        ]; (ii) action theories with fading memory [
        <xref ref-type="bibr" rid="ref7">7</xref>
        ]; (iii) resource-constrained colored Petri
nets [
        <xref ref-type="bibr" rid="ref20">20</xref>
        ]; (iv) controlled generation of fresh identifiers and other modeling guidelines [
        <xref ref-type="bibr" rid="ref28 ref29">28, 29</xref>
        ].
      </p>
      <p>
        State-boundedness is essential towards singling out decidable classes for verification. Distinct
results are obtained for branching- vs linear-time first-order temporal logics.
Branching-time FO temporal logics. In [
        <xref ref-type="bibr" rid="ref2 ref3">2, 3</xref>
        ], it is shown that verification of the full FO
 -calculus is decidable over state-bounded, generic RTSs. This is proved constructively, showing
how to compute a finite-state abstract RTSs that is guaranteed to satisfy all and only the FO
 -calculus properties of the original one. The abstraction is built by considering the input
RTS, the bound, and the number of variables contained in the formula of interest. Notably, the
abstraction can be computed also without fixing a specific value for the bound [
        <xref ref-type="bibr" rid="ref8">8</xref>
        ].
      </p>
      <p>
        In [
        <xref ref-type="bibr" rid="ref2 ref3 ref8">8, 2, 3</xref>
        ], fragments of the full FO  -calculus are studied. Of particular interest is the one
with persistent quantification , where FO quantification tracks over time only the identity of
objects that remain active in consecutive states (whereas objects disappearing from a state are
not tracked anymore). For this fragment, it is shown that an abstract RTS can be constructed
independently from the formula to verify, that is, considering only the input RTS.
–
Linear-time FO temporal logics. In [
        <xref ref-type="bibr" rid="ref3">3</xref>
        ], it is shown that FO LTL behaves radically diferently
from the FO  -calculus: verification of FO LTL properties is undecidable over generic,
statebounded RTSs with a bound of 1. This is particularly interesting, as it implies that in the
FO setting, the  -calculus does not subsume LTL, diferently from the propositional setting.
In [
        <xref ref-type="bibr" rid="ref26">26</xref>
        ], the reason for undecidability is singled out, thanks to a reduction from LTL with freeze
quantifiers [
        <xref ref-type="bibr" rid="ref30">30</xref>
        ]: it resides in the ability of the logic to unrestrictedly quantify over objects that
may be arbitrarily far away from each other. This, in turn, hints that decidability may hold for
FO LTL with persistent quantification. As shown in [
        <xref ref-type="bibr" rid="ref26">26</xref>
        ], this is indeed the case, and further
decidability results are obtained for the problem of monitoring state-bounded, evolving traces.
Akcnowledgements
This work is partly supported by the ERC Advanced Grant WhiteMech (No. 834228), the
EU ICT-48 2020 project TAILOR (No. 952215), the Sapienza Project DRAPE, the Italian Basic
Research (PRIN) projects HOPE and PINPOINT, the unibz ID 2020 project SMART-APP, and the
Wallenberg AI, Autonomous Systems and Software Program (WASP) funded by the Knut and
Alice Wallenberg Foundation.
      </p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          [1]
          <string-name>
            <given-names>D.</given-names>
            <surname>Calvanese</surname>
          </string-name>
          , G. De Giacomo,
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <article-title>Foundations of data-aware process analysis: A database theory perspective</article-title>
          ,
          <source>in: Proc. of PODS</source>
          , ACM,
          <year>2013</year>
          , pp.
          <fpage>1</fpage>
          -
          <lpage>12</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          [2]
          <string-name>
            <given-names>D.</given-names>
            <surname>Calvanese</surname>
          </string-name>
          , G. De Giacomo,
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Patrizi</surname>
          </string-name>
          , On first-order
          <article-title>-calculus over Situation Calculus action theories</article-title>
          ,
          <source>in: Proc. of KR</source>
          , AAAI Press,
          <year>2016</year>
          , pp.
          <fpage>411</fpage>
          -
          <lpage>420</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          [3]
          <string-name>
            <given-names>D.</given-names>
            <surname>Calvanese</surname>
          </string-name>
          , G. De Giacomo,
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Patrizi</surname>
          </string-name>
          , First-order
          <article-title>-calculus over generic transition systems and applications to the Situation Calculus</article-title>
          ,
          <source>Information and Computation</source>
          <volume>259</volume>
          (
          <year>2018</year>
          )
          <fpage>328</fpage>
          -
          <lpage>347</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          [4]
          <string-name>
            <given-names>S.</given-names>
            <surname>Abiteboul</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Hull</surname>
          </string-name>
          ,
          <string-name>
            <given-names>V.</given-names>
            <surname>Vianu</surname>
          </string-name>
          , Foundations of Databases, Addison Wesley,
          <year>1995</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          [5]
          <string-name>
            <given-names>J.</given-names>
            <surname>McCarthy</surname>
          </string-name>
          ,
          <string-name>
            <given-names>P. J.</given-names>
            <surname>Hayes</surname>
          </string-name>
          ,
          <article-title>Some philosophical problems from the standpoint of artificial intelligence</article-title>
          ,
          <source>Machine Intelligence</source>
          <volume>4</volume>
          (
          <year>1969</year>
          )
          <fpage>463</fpage>
          -
          <lpage>502</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          [6]
          <string-name>
            <given-names>R.</given-names>
            <surname>Reiter</surname>
          </string-name>
          ,
          <article-title>Knowledge in Action. Logical Foundations for Specifying and Implementing Dynamical Systems</article-title>
          , The MIT Press,
          <year>2001</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          [7]
          <string-name>
            <given-names>G.</given-names>
            <surname>De Giacomo</surname>
          </string-name>
          ,
          <string-name>
            <given-names>Y.</given-names>
            <surname>Lesperance</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Patrizi</surname>
          </string-name>
          , Bounded Situation Calculus action theories,
          <source>Artificial Intelligence</source>
          <volume>237</volume>
          (
          <year>2016</year>
          )
          <fpage>172</fpage>
          -
          <lpage>203</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          [8]
          <string-name>
            <given-names>B.</given-names>
            <surname>Bagheri Hariri</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            <surname>Calvanese</surname>
          </string-name>
          , G. De Giacomo, R. De Masellis,
          <string-name>
            <given-names>P.</given-names>
            <surname>Felli</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <article-title>Description logic knowledge and action bases</article-title>
          ,
          <source>J. of Artificial Intelligence Research</source>
          <volume>46</volume>
          (
          <year>2013</year>
          )
          <fpage>651</fpage>
          -
          <lpage>686</lpage>
          . doi:
          <volume>10</volume>
          .1613/jair.3826.
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          [9]
          <string-name>
            <given-names>D.</given-names>
            <surname>Calvanese</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Patrizi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Stawowy</surname>
          </string-name>
          ,
          <article-title>Plan synthesis for knowledge and action bases</article-title>
          ,
          <source>in: Proc. of IJCAI</source>
          , AAAI Press,
          <year>2016</year>
          , pp.
          <fpage>1022</fpage>
          -
          <lpage>1029</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          [10]
          <string-name>
            <given-names>P. A.</given-names>
            <surname>Abdulla</surname>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Aiswarya</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M. F.</given-names>
            <surname>Atig</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <string-name>
            <given-names>O.</given-names>
            <surname>Rezine</surname>
          </string-name>
          ,
          <article-title>Recency-bounded verification of dynamic database-driven systems</article-title>
          ,
          <source>in: Proc. of PODS</source>
          , ACM,
          <year>2016</year>
          , pp.
          <fpage>195</fpage>
          -
          <lpage>210</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          [11]
          <string-name>
            <given-names>S.</given-names>
            <surname>Borgwardt</surname>
          </string-name>
          ,
          <string-name>
            <given-names>J.</given-names>
            <surname>Hofmann</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Kovtunova</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Krötzsch</surname>
          </string-name>
          ,
          <string-name>
            <given-names>B.</given-names>
            <surname>Nebel</surname>
          </string-name>
          , M. Steinmetz,
          <article-title>Expressivity of planning with Horn description logic ontologies</article-title>
          ,
          <source>in: Proc. of AAAI</source>
          ,
          <year>2022</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          [12]
          <string-name>
            <given-names>F.</given-names>
            <surname>Belardinelli</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Lomuscio</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Patrizi</surname>
          </string-name>
          ,
          <article-title>An abstraction technique for the verification of artifact-centric systems</article-title>
          ,
          <source>in: Proc. of KR</source>
          ,
          <year>2012</year>
          , pp.
          <fpage>319</fpage>
          -
          <lpage>328</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref13">
        <mixed-citation>
          [13]
          <string-name>
            <given-names>F.</given-names>
            <surname>Belardinelli</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Lomuscio</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Patrizi</surname>
          </string-name>
          ,
          <article-title>Verification of agent-based artifact systems</article-title>
          ,
          <source>J. of Artificial Intelligence Research</source>
          <volume>51</volume>
          (
          <year>2014</year>
          )
          <fpage>333</fpage>
          -
          <lpage>376</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref14">
        <mixed-citation>
          [14]
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            <surname>Calvanese</surname>
          </string-name>
          , G. De Giacomo,
          <article-title>Verification of data-aware commitment-based multiagent system</article-title>
          ,
          <source>in: Proc. of AAMAS</source>
          , IFAAMAS/ACM,
          <year>2014</year>
          , pp.
          <fpage>157</fpage>
          -
          <lpage>164</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref15">
        <mixed-citation>
          [15]
          <string-name>
            <given-names>D.</given-names>
            <surname>Calvanese</surname>
          </string-name>
          , G. Delzanno,
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <article-title>Verification of relational multiagent systems with data types</article-title>
          ,
          <source>in: Proc. of AAAI</source>
          , AAAI Press,
          <year>2015</year>
          , pp.
          <fpage>2031</fpage>
          -
          <lpage>2037</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref16">
        <mixed-citation>
          [16]
          <string-name>
            <given-names>K.</given-names>
            <surname>Bhattacharya</surname>
          </string-name>
          ,
          <string-name>
            <given-names>N. S.</given-names>
            <surname>Caswell</surname>
          </string-name>
          ,
          <string-name>
            <given-names>S.</given-names>
            <surname>Kumaran</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Nigam</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F. Y.</given-names>
            <surname>Wu</surname>
          </string-name>
          ,
          <article-title>Artifact-centered operational modeling: Lessons from customer engagements</article-title>
          ,
          <source>IBM Systems J</source>
          .
          <volume>46</volume>
          (
          <year>2007</year>
          )
          <fpage>703</fpage>
          -
          <lpage>721</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref17">
        <mixed-citation>
          [17]
          <string-name>
            <given-names>A.</given-names>
            <surname>Deutsch</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Hull</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Patrizi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>V.</given-names>
            <surname>Vianu</surname>
          </string-name>
          ,
          <article-title>Automatic verification of data-centric business processes</article-title>
          ,
          <source>in: Proc. of ICDT</source>
          ,
          <year>2009</year>
          , pp.
          <fpage>252</fpage>
          -
          <lpage>267</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref18">
        <mixed-citation>
          [18]
          <string-name>
            <given-names>B.</given-names>
            <surname>Bagheri Hariri</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            <surname>Calvanese</surname>
          </string-name>
          , G. De Giacomo,
          <string-name>
            <given-names>A.</given-names>
            <surname>Deutsch</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <article-title>Verification of relational data-centric dynamic systems with external services</article-title>
          ,
          <source>in: Proc. of PODS</source>
          ,
          <year>2013</year>
          , pp.
          <fpage>163</fpage>
          -
          <lpage>174</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref19">
        <mixed-citation>
          [19]
          <string-name>
            <given-names>F.</given-names>
            <surname>Rosa-Velardo</surname>
          </string-name>
          , D. de Frutos-Escrig,
          <article-title>Decidability and complexity of Petri nets with unordered data</article-title>
          ,
          <source>Theoretical Computer Science</source>
          <volume>412</volume>
          (
          <year>2011</year>
          )
          <fpage>4439</fpage>
          -
          <lpage>4451</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref20">
        <mixed-citation>
          [20]
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Rivkin</surname>
          </string-name>
          ,
          <article-title>Model checking Petri nets with names using data-centric dynamic systems</article-title>
          ,
          <source>Formal Aspects of Computing</source>
          <volume>28</volume>
          (
          <year>2016</year>
          )
          <fpage>615</fpage>
          -
          <lpage>641</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref21">
        <mixed-citation>
          [21]
          <string-name>
            <given-names>A.</given-names>
            <surname>Polyvyanyy</surname>
          </string-name>
          ,
          <string-name>
            <surname>J. M. E. M. van der Werf</surname>
            , S. Overbeek,
            <given-names>R.</given-names>
          </string-name>
          <string-name>
            <surname>Brouwers</surname>
          </string-name>
          ,
          <article-title>Information systems modeling: Language, verification, and tool support</article-title>
          ,
          <source>in: Proc. of CAiSE</source>
          , volume
          <volume>11483</volume>
          <source>of LNCS</source>
          , Springer,
          <year>2019</year>
          , pp.
          <fpage>194</fpage>
          -
          <lpage>212</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref22">
        <mixed-citation>
          [22]
          <string-name>
            <given-names>S.</given-names>
            <surname>Ghilardi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Gianola</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Rivkin</surname>
          </string-name>
          ,
          <article-title>Petri nets with parameterised data - Modelling and verification</article-title>
          ,
          <source>in: Proc. of BPM</source>
          , volume
          <volume>12168</volume>
          <source>of LNCS</source>
          , Springer,
          <year>2020</year>
          , pp.
          <fpage>55</fpage>
          -
          <lpage>74</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref23">
        <mixed-citation>
          [23]
          <string-name>
            <surname>G. De Giacomo</surname>
            ,
            <given-names>Y.</given-names>
          </string-name>
          <string-name>
            <surname>Lesperance</surname>
            ,
            <given-names>F.</given-names>
          </string-name>
          <string-name>
            <surname>Patrizi</surname>
            ,
            <given-names>Bounded Situation</given-names>
          </string-name>
          <article-title>Calculus action theories and decidable verification</article-title>
          ,
          <source>in: Proc. of KR</source>
          ,
          <year>2012</year>
          , pp.
          <fpage>467</fpage>
          -
          <lpage>477</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref24">
        <mixed-citation>
          [24]
          <string-name>
            <given-names>J. A.</given-names>
            <surname>Baier</surname>
          </string-name>
          ,
          <string-name>
            <given-names>S. A.</given-names>
            <surname>McIlraith</surname>
          </string-name>
          ,
          <article-title>Planning with first-order temporally extended goals using heuristic search</article-title>
          ,
          <source>in: Proc. of AAAI</source>
          , AAAI Press,
          <year>2006</year>
          , pp.
          <fpage>788</fpage>
          -
          <lpage>795</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref25">
        <mixed-citation>
          [25]
          <string-name>
            <given-names>P. A.</given-names>
            <surname>Abdulla</surname>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Aiswarya</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M. F.</given-names>
            <surname>Atig</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <string-name>
            <given-names>O.</given-names>
            <surname>Rezine</surname>
          </string-name>
          ,
          <article-title>Complexity of reachability for data-aware dynamic systems</article-title>
          ,
          <source>in: Proc. of the 18th Int. Conf. on Application of Concurrency to System Design (ACSD)</source>
          ,
          <source>IEEE Computer Society</source>
          ,
          <year>2018</year>
          , pp.
          <fpage>11</fpage>
          -
          <lpage>20</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref26">
        <mixed-citation>
          [26]
          <string-name>
            <given-names>D.</given-names>
            <surname>Calvanese</surname>
          </string-name>
          , G. De Giacomo,
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Patrizi</surname>
          </string-name>
          ,
          <article-title>Verification and monitoring for ifrst-order LTL with persistence-preserving quantification over finite and infinite traces</article-title>
          ,
          <source>in: Proc. of IJCAI</source>
          , AAAI Press,
          <year>2022</year>
          . To appear.
        </mixed-citation>
      </ref>
      <ref id="ref27">
        <mixed-citation>
          [27]
          <string-name>
            <given-names>B.</given-names>
            <surname>Bagheri Hariri</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            <surname>Calvanese</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Deutsch</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <article-title>State-boundedness in data-aware dynamic systems</article-title>
          ,
          <source>in: Proc. of KR</source>
          , AAAI Press,
          <year>2014</year>
          , pp.
          <fpage>458</fpage>
          -
          <lpage>467</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref28">
        <mixed-citation>
          [28]
          <string-name>
            <given-names>D.</given-names>
            <surname>Solomakhin</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <string-name>
            <given-names>S.</given-names>
            <surname>Tessaris</surname>
          </string-name>
          , R. De Masellis,
          <article-title>Verification of artifact-centric systems: Decidability and modeling issues</article-title>
          ,
          <source>in: Proc. of ICSOC</source>
          , volume
          <volume>8274</volume>
          <source>of LNCS</source>
          , Springer,
          <year>2013</year>
          , pp.
          <fpage>252</fpage>
          -
          <lpage>266</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref29">
        <mixed-citation>
          [29]
          <string-name>
            <given-names>M.</given-names>
            <surname>Montali</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            <surname>Calvanese</surname>
          </string-name>
          ,
          <article-title>Soundness of data-aware, case-centric processes</article-title>
          ,
          <source>Int. J. on Software Tools for Technology Transfer</source>
          <volume>18</volume>
          (
          <year>2016</year>
          )
          <fpage>535</fpage>
          -
          <lpage>558</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref30">
        <mixed-citation>
          [30]
          <string-name>
            <given-names>S.</given-names>
            <surname>Demri</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Lazic</surname>
          </string-name>
          ,
          <article-title>LTL with the freeze quantifier and register automata</article-title>
          ,
          <source>ACM Trans. on Computational Logic</source>
          <volume>10</volume>
          (
          <year>2009</year>
          ).
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>