Rajeev Joshi Leslie Lamport John Matthews Serdar Tasiran Mark R. Tuttle Yuan Yu Checking Cache-Coherence Protocols with TLA<sup>+</sup>. 125-131 2003 22 Formal Methods in System Design 2 http://dx.doi.org/10.1023/A:1022969405325 db/journals/fmsd/fmsd22.html#JoshiLMTTY03