"Tackling Concurrency Bugs with TLA+" by Hillel Wayne
Strange Loop ConferenceYouTube ↗
Further reading 1
Caption notes
Wayne models transfers with a no-overdraft invariant. TLC can return the interleaving that violates it, within the states and transitions included in the model.
Video or transcript source ↗Original passages · 2
find one that violated our invariant it also provided an error tracerequired 17 steps to reproduce the error