Verifying Safety Properties with the TLA+ Proof System.

Kaustuv Chaudhuri, Damien Doligez, Leslie Lamport, Stephan Merz

Browse the full CADE paper archive.