Mechanical Verification of Concurrent Systems with TLA.

Urban Engberg Peter Grønning Leslie Lamport Mechanical Verification of Concurrent Systems with TLA. 86-97 1992 conf/larch/1992 Larch db/conf/larch/larch1992.html#EngbergGL92