Auxiliary Variables in TLA+ - Inria - Institut national de recherche en sciences et technologies du numérique
Rapport (Rapport De Recherche) Année : 2017

Auxiliary Variables in TLA+

Résumé

Auxiliary variables are often needed for verifying that an implementation is correct with respect to a higher-level specification. They augment the formal description of the implementation without changing its semantics–that is, the set of behaviors that it describes. This paper explains rules for adding history, prophecy, and stuttering variables to TLA+ specifications, ensuring that the augmented specification is equivalent to the original one. The rules are explained with toy examples, and they are used to verify the correctness of a simplified version of a snapshot algorithm due to Afek et al.
Fichier principal
Vignette du fichier
auxiliary.pdf (487.85 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01488617 , version 1 (13-03-2017)
hal-01488617 , version 2 (28-05-2017)

Identifiants

Citer

Leslie Lamport, Stephan Merz. Auxiliary Variables in TLA+. [Research Report] Inria Nancy - Grand Est (Villers-lès-Nancy, France); Microsoft Research. 2017. ⟨hal-01488617v2⟩
300 Consultations
125 Téléchargements

Altmetric

Partager

More