News for hackers. Stuff that matters.
Re:TLA+ by hwayne on Monday March 08, 2021 @03:31PM (#26391103)
If you don't have any concurrency or nondeterminism in your spec, then you'll probably want different tools. It's not that TLA+ is bad at modeling single-threaded algorithms, it's just that makes a lot of design decisions around representing concurrency, and there's an opportunity cost to that. I'd consider a code-level formal verification language, like Liquid Haskell or Dafny.

There are no comments on this comment yet.