Résumé | Since 2011, engineers at Amazon have been using TLA+ to help solve difficult
design problems in critical systems. This talk describes the reasons why we
chose TLA+ instead of other methods, how we’ve applied it so far, and areas in which we would welcome further progress. |