What TLA+ can and can't check (by hwayne) — discussion

#formalmethods