TLA + Proofs.

Denis Cousineau, Damien Doligez, Leslie Lamport, Stephan Merz, Daniel Ricketts, Hernn Vanzetto

Browse the full FM paper archive.