Model Checking, Tla Plus, TLC, Java, Concurrency.
A state (a mapping of variables names to values) transitions into a new state through actions that represent the behavior of the system. Actions are defined logically as a relation between values in the state before the action and values in the state after the action, which are primed. For