I find it weird that this comment is gray but it's the only one in the thread so far that mentions TLA+ which is highly relevant here.