CONSTANTS LeaseSpan = 60 ReplyMax = 20 SPECIFICATION Spec INVARIANTS TypeOK ProcessExclusion PROPERTY Handoff