摘要: TLA+ is a specification language for concurrent and reactive systems that combines the temporal logic TLA with full first-order ZF set theory. TLC new model checker debugging by checking invariance properties of finite-state specification. It accepts subclass specifications should include most descriptions real system designs. has been used engineers to find errors in cache coherence protocol Compaq multiprocessor. We describe their models, how works, our experience using it.