Thanks! Our TigerStyle talk is worth a quick watch, if only to get a feel for TB's safety and testing techniques indepth. It's certainly valuable to verify pr

Thanks! Our TigerStyle talk is worth a quick watch, if only to get a feel for TB's safety and testing techniques indepth. It's certainly valuable to verify protocol specifications using formal methods. However, compared to TLA+, we use Deterministic Simulation Testing, which enables us to test the system as implemented, not only as specified.