A Computer Scientist Tells Mathematicians How to Write Proofs
Could anyone with first-hand experience of TLA+ comment on how practical it actually is?I've been toying with idea of trying this for a not-quite-trivial (programming!) project I'm working on, but the documentation and UX have so far kept me quite skeptical of using this "for real". The fact that I also can't turn the proof into a program in a semi-automated fashion also seems to indicate that there's at least some barrier where the "doubled" amount of work would be justified. (I'm more inclined towards something like Idris or LiquidHaskell which seem to support practical programming better and will probably let you get arbitrarily close to "proof" in any practical sense where proof will matter.)I take it that this was mostly about mathematics and not  implementations of programs, which may not quite have the same trade-offs. I still would like to hear from anyone with direct experience :).