Model Checking, Tla Plus, TLC, Java, Concurrency.
thinks he can start to relax. But he can’t. A question keeps haunting him: What if this happens to a more complex system? What if he is not so lucky next time? What if the next bug only happens once a month? Once a year? What if the particular timing that produces the bug in deployed code cannot be