Proving liveness with TLA (via hwayne) — discussion

#formalmethods