interface running { in void start(); in void stop(); behaviour { bool runs = false; [!runs] { on start: runs = !runs; on stop: illegal; } [otherwise] { on start: illegal; on stop: runs = !runs; } } }