Model Checking, Tla Plus, TLC, Java, Concurrency.
instance, the Java assignment statement x = 3*x + 1; corresponds to the relation x' = 3*x + 1. Note that this is a Boolean formula and = is good old mathematical equality, not an assignment. So, x’ ≥ x or (x' - x) % 7 = 1 are possible TLA actions, even though they have no equivalent in a