Composing TLA+ Specifications with State Machines (by hwayne) — discussion

#formalmethods