Construction and Formal Verification of Fault-Tolerant, Distributed, Mutual Exclusion (2017)