Properties are found in : http://people.cs.aau.dk/~ulrik/ecdar/bugs/simulatorInvariantBreak.q A very simple system where two almost identical systems does not refine each other. If the invariant only is present on the right hand side of the refinement then the simulator can reach an inconsistent state after having performed the refinement check.