Learn More
Since 2011, engineers at Amazon have been using TLA+ to help solve difficult design problems in critical systems. This paper describes the reasons why we chose TLA+ instead of other methods, and(More)