Kaustuv Chaudhuri Damien Doligez Leslie Lamport Stephan Merz A TLA+ Proof System. 2008 LPAR Workshops http://ceur-ws.org/Vol-418/paper2.pdf conf/lpar/2008w db/conf/lpar/lpar2008w.html#ChaudhuriDLM08