Model Checking, Tla Plus, TLC, Java, Concurrency.
(operators, in TLA+) to model the Java methods wait, notify and notifyAll. The definitions may look weird (and somewhat intimidating), but one gets used to it. To understand them, however, we need to dive a little more into TLA+semantics. Basically, a TLA+ module defines a state transition system.