We only have this paper's title and publication details.
Read it at the sourceEngineers use TLA+ to prevent serious but subtle bugs from reaching production.
No takes yet. Share an insight, caveat, or question.
Newcombe et al. (2015) studied this question.
Synapse has enriched one closely related paper. Consider it for comparative context: