TLA+ By Example