2 ms·
There might be plenty of potential failures that we haven't all seen, simply because the problems were fixed after TLA+ modeling brought them up.
by zozbot234 1y ago
There might be plenty of potential failures that we haven't all seen, simply because the problems were fixed after TLA+ modeling brought them up.
- pjmlp 1y agoOr it might be that the model doesn't really avoid all possible human failures when translating TLA+ into Java, C++ metatemplate programming, or whatver.