Specifying serializability in TLA+ (via danlamanna) — discussion

#formalmethods