3 ms·
> failure but TLA+ proved that it was impossible to build a reliable system based on the hard requirements That's probably the most useful result TLA+ can give
by kilotaras 7y ago
> failure but TLA+ proved that it was impossible to build a reliable system based on the hard requirements
That's probably the most useful result TLA+ can give in comparison to not using it.
Understanding that requirements are impossible after 1-2 weeks of modelling is way better that after 6+ months of coding.
- hwayne 7y agoOne of my favorite war stories was losing a client after we spent two days trying to model their problem and discovered they didn't actually know what they wanted and they decided to just scrap the project and do something else