Merz, S. (2012). On the Logic of TLA+. Computing and Informatics, 22(3-4), 351–379. Retrieved from https://www.cai.sk/ojs/index.php/cai/article/view/460