[jorangreef]

Thanks!

Our TigerStyle talk is worth a quick watch, if only to get a feel for TB's safety and testing techniques indepth.

It's certainly valuable to verify protocol specifications using formal methods.

However, compared to TLA+, we use Deterministic Simulation Testing, which enables us to test the system as implemented, not only as specified.