Our TigerStyle talk is worth a quick watch, if only to get a feel for TB's safety and testing techniques indepth.
It's certainly valuable to verify protocol specifications using formal methods.
However, compared to TLA+, we use Deterministic Simulation Testing, which enables us to test the system as implemented, not only as specified.
Our TigerStyle talk is worth a quick watch, if only to get a feel for TB's safety and testing techniques indepth.
It's certainly valuable to verify protocol specifications using formal methods.
However, compared to TLA+, we use Deterministic Simulation Testing, which enables us to test the system as implemented, not only as specified.