From Helena Ensemble Speci cations to Promela Veri cation Models

With Helena, we introduced a modeling approach for distributed systems where components dynamically collaborate in ensembles. Conceptually, components participate in a goal-oriented collaboration by adopting certain roles in the ensemble. To verify the goal-directed behavior of ensembles, we propose to systematically translate Helena speci cations to Promela and verify them with the model-checker Spin. In this paper, we report on tool support for an automated transition from Helena to Promela. Relying on the Xtext workbench of Eclipse, we provide a code generator from the domain-speci c-language HelenaText to Promela. The generated Promela model simulates the two layers, components and their adopted roles from Helena, and allows dynamic role creation as well as asynchronous communication of roles.