Distributed systems are famously hard to get right and mathematical formalism is pretty much the only way to do so at scale. Amazon found that out with S3[1]. T

Distributed systems are famously hard to get right and mathematical formalism is pretty much the only way to do so at scale. Amazon found that out with S3[1]. TLA+ exists for very good reason! That’s not to discount the reality that mapping the model to reality is hard work that needs to be done. [1] https://lamport.azurewebsites.net/tla/formal-methods-amazon.pdf https://lamport.azurewebsites.net/tla/formal-methods-amazon....