fluents: armed(P) requires package(P). unsafe. actions: dunk(P) requires package(P). always: inertial armed(P). caused -armed(P) after dunk(P). caused unsafe if armed(P). executable dunk(P). initially: total armed(P). caused false if armed(P), armed(P1), P <> P1. caused false if not unsafe. securePlan. goal: not unsafe?