4 ms·
TLA+ is only for specification. In one of the papers on it Lamport mentions just putting a copy of the specification in a comment above the implementation. If y
by aeneasmackenzie 8y ago
TLA+ is only for specification. In one of the papers on it Lamport mentions just putting a copy of the specification in a comment above the implementation. If you get a bug you just need to find where your implementation differs from your specification which he finds is usually pretty easy.
If your code doesn't have a specification (of course usually less precise), fixing bugs is incoherent. How can you say come behavior is a bug?
- shusson 8y agoYeah but why not generate code from your specification? Or create a model of the specification that you can interrogate in code?
- aeneasmackenzie 8y agoYou would need to include irrelevant details. TLA+ is an actual declarative language, so it's not executable, but it can be model-checked.