Inklings: a tumblelog

Thinking for Programmers

The thing that gets me about things like TLA+ is that once you’re written the spec, you effectively have the program, so why not just run the spec?