Model Checking, Tla Plus, TLC, Java, Concurrency.
buffer (as a sequence of data elements) and its wait set (as a set of threads). RunningThreads is defined as a set difference between all the threads (Participants) and the threads currently in the wait set. Thus, it is the set of threads currently running. Next, the module defines three “macros”