To verify whether the studied property holds (or not) on the initial and reduced models, observer automaton OBS1 has been designed (Fig. 10.a). For clarity reasons, only the structure of this automaton is depicted on this figure; invariants, guards, communication channels, shared variables are omitted.