Model Checking, Tla Plus, TLC, Java, Concurrency.
noire of researchers in the model checking community for years. Still, model checking is a very useful technique, as can be demonstrated by applying it to our bounded buffer problem. To start TLC, one needs to instantiate a module by assigning values to all its constants. For the buffer example, a