Specifying serializability in TLA+

An unexpected discovery: Automated reasoning often makes systems more efficient and easier to maintain

TLA+ Wiki

The RAISE specification language, method, and tools

Why I use TLA+ and not(TLA+)

TLA from first principles

Automated Verification of Go Programs via Bounded Model Checking (2021)

Verified Programming in Dafny

Formally verifying tiny bits of QEMU using Frama-C, Richard W.M. Jones, 2020

Ironclad: Hard real-time capable POSIX-compatible kernel written in SPARK/Ada

TLA⁺ is more than a DSL for breadth-first search

the soundless interstitium

Specification and Model-checking of the ZKsync Governance Protocol

Conway's law

Logic and Computation Intertwined

VeriNum: Formally Verified Numerical Methods

The Future of TLA+ [pdf]

State and time are the same thing

aya-dev: A proof assistant and a dependently-typed language

Streams, Calculational Proofs and Dafny

What does it mean to be a programming language, anyhow? (2021) [pdf]

Teaching Concurrency (2009)

Beal's Conjecture Revisited

A Knownbits Abstract Domain for the Toy Optimizer, Correctly

Formal verification makes RSA faster — and faster to deploy

Formally verifying security properties of CHERI processors

Knuckledragger, a Semi-Automated Python Proof Assistant

Quint

SciLean: Scientific computing in Lean 4

Provably Correct, Secure, and Leakage-Free Systems

More →