TLA+ is what unit testing looks like when a mathematician designs it.