Comment by gooosle

How do you know whether your TLA+ model is accurate?