[1]
S. Merz, β€œOn the Logic of TLA+”, Comput. Inform., vol. 22, no. 3-4, pp. 351–379, Feb. 2012.