Apalache - Symbolic Model Checker for TLA+

Idiomatic TLA+