@misc{indiciae51b1619d8b1a,
  title = {Verifying Safety Properties With the TLA+ Proof System},
  author = {Kaustuv Chaudhuri and Damien Doligez and Leslie Lamport and Stephan Merz},
  year = {2010},
  doi = {10.1007/978-3-642-14203-1\_12},
  url = {https://arxiv.org/abs/1011.2560},
  note = {Source identifier: 1011.2560}
}