6 comments

[ 2.8 ms ] story [ 22.5 ms ] thread
This is the coolest demonstration of TLA+ I've seen to date. It takes you through specification, implementation, model-checking with TLC, visualization and animation, checking an inductive invariant, deductive proofs mechanically checked by TLAPS, refinement mapping and even model-based trace checking.