This paper introduces AgentSpeak(F), a variation of the BDI logic programming language AgentSpeak(L) intended to permit the model-theoretic verification of multi-agent systems. After briefly introducing AgentSpeak(F) and discussing its relationship to AgentSpeak(L), we show how AgentSpeak(F) programs can be transformed into Promela, the model specification language for the Spin model-checking system. We also describe how specifications written in a simplified form of BDI logic can be transformed into Spin-format linear temporal logic formul. With our approach, it is thus possible to automatically verify whether or not multi-agent systems implemented in AgentSpeak(F) satisfy specifications expressed as BDI logic formul. We illustrate our approach with a short case study, in which we show how BDI properties of a simulated auction system implemented in AgentSpeak(F) were verified.

Abstract. This paper gives an overview of our recent work on an approach to verifying multi-agent programs. We automatically translate multi-agent systems programmed in the logic-based agent-oriented programming language AgentSpeak into either Promela or Java, and then use the associated Spin and JPF model checkers to verify the resulting systems. We also describe the simplified BDI logical language that is used to write the properties we want the systems to satisfy. The approach is illustrated by means of a simple case study.

this paper is to describe a toolkit we have developed to support the use of model checking techniques for AgentSpeak(L). The toolkit, called CASP (Checking AgentSpeak Programs), automatically translates AgentSpeak(L) code into the input language of existing model checkers. In [1], we showed how to translate from AgentSpeak(L) to Promela, the model speci cation language for the SPIN LTL model checker [5]. More recently [2], we developed an alternative approach, based on the translation of AgentSpeak(L) agents into Java and veri cation via JPF2, a general purpose Java model checker [8]

AgentSpeak is a reactive planning language for programming autonomous agents. It has recently been shown that model checking techniques can be applied to the veri cation of AgentSpeak systems, through a translation to promela, the model speci cation language for the SPIN LTL modelchecking system. In this paper, we introduce an alternative veri cation approach for AgentSpeak, by translating AgentSpeak to Java and then applying JPF2, a general purpose Java model checker. The primary advantage of this approach is that Java is the language of choice for most agent implementations, and the approach is thus much closer to the current practice of agent development than the promela-based approach. We examine both alternatives by means of a practical application, provide a qualitative comparison between them, and identify some key issues for future research.