Specifying Systems: The TLA+ Language and Tools for Hardware and Software Engineers (2002)

by L Lamport