James Hamilton, the architect of AWS and one of the authors of DynamoDB wrote a blog post on formal verification of distributed systems. He specifically mention

James Hamilton, the architect of AWS and one of the authors of DynamoDB wrote a blog post on formal verification of distributed systems. He specifically mentioned TLA+ as what his team at Amazon used to do this. https://perspectives.mvdirona.com/2014/07/challenges-in-designing-at-scale-formal-methods-in-building-robust-distributed-systems/ https://perspectives.mvdirona.com/2014/07/challenges-in-desi...