Comment Comment by otterley Would formal validation of these algorithms (e.g. with TLA+) help avoid such bugs? parent otterley 6 months ago