CONSTANTS LeaseSpan = 30 ReplyMax = 0 SPECIFICATION Spec INVARIANTS TypeOK ProcessExclusion PROPERTY Handoff