Tla Plus, Resilience, Software Development, DevOps.
civilization as we know it. If we change the \A (All VMs are good) in our invariant to \E (at least one good VM Exists) the model runs without any failure states: ServersHealthy == \E vm \in VMs: Cluster[vm] <= 9 But that’s not enough… We can do better. We can add even more complexity. Example 3: