Merz, S. 2012. On the Logic of TLA+. Computing and Informatics. 22, 3-4 (Feb. 2012), 351–379.