AllSAT

Another option would be to have the generator raise an exception when there are no models. This would break from the existing convention of `satisfiable`, though, but it would make it explicit that you typically need to handle that case separately in code.