Remix.run Logo
aerodexis 6 hours ago

I did this myself a few weeks ago and the technique that helped me the most was to compare the TLA output against the race-conditions I could construct by hand. I worked iteratively and unit-tested the model by constructing a model that didn't have certain race protection mechanisms and validating that the model generated the expected race.

You can also work backwards from the races it generates and ensure that they're real races.

esafak 5 hours ago | parent [-]

What did you do to get the TLA output?

aerodexis 5 hours ago | parent [-]

I was working from a design-doc, not code.

"look at @design-document and generate a TLA+ specification for the interactions between local and remote"