Appreciate the reference. I&#x27;m holding off on ProB and B for now because the B method has mixed results in CompSci literature. I mean, it&#x27;s been proven on a number of high assurance projects <i>by pro&#x27;s</i>. I at least like that both B and TLA+ are pretty straight-forward to compared to most where a person has both a mathematical and good, mental model of what&#x27;s going on. B particularly as it maps to imperative with ease.<p>I&#x27;m keeping it bookmarked just in case. Meanwhile, I just got a ton of stuff on asynchronous verification in response to another commenter&#x27;s troubles there. I was away too long: looks like async and GALS are both mostly solved problems at the cutting edge with some tools to help. A lot to skim or read that puts my B experiments further on the backlog.