Merz, S. (2012). On the Logic of TLA+. Computing and Informatics, 22(3-4), 351–379. Retrieved from http://147.213.75.17/ojs/index.php/cai/article/view/460