Publication
Should Your Specification Language Be Typed?
Publication
A Semantics for Imprecise Exceptions
Publication
Specifying Concurrent Systems with TLA+
Publication
A Lazy Caching Proof in TLA
Publication