Experience using formal methods for specifying a multi-agent system

The process and results of using formal methods to specify the Lights Out Ground Operations System (LOGOS) are presented. LOGOS is a prototype multi agent system developed to demonstrate the feasibility of providing autonomy to satellite ground operations functions at NASA Goddard Space Flight Center (GSFC). Following the initial implementation of LOGOS, the development team decided to use formal methods to check for race conditions, deadlocks and omissions. The specification exercise revealed several omissions as well as race conditions. After completing the specification, the team concluded that certain tools would have made the specification process easier. The paper gives a sample specification of two of the agents in the LOGOS system and examples of omissions and race conditions found.