Quint Deserves Rust

Apalache - Symbolic Model Checker for TLA+

Idiomatic TLA+