∀T1,F,T2 (stoppedIn(T1,F,T2) ⇔ ∃E,T (T1 < T < T2 | happens(E,T) | terminates(E,F,T) ))
∀T,H1,H2 ((holdsAt(waterLevel(H1),T) & holdsAt(waterLevel(H2),T)) ⇒ H1 = H2)