[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[tlaplus] Can we have reachability properties in TLA⁺?



Surprisingly (or unsurprisingly, depending on how much of Lamport's writing you've read) the answer is yes! Reachability properties seem like more of a branching-time logic thing but they're viable in TLA+ with some fairness assumption trickery.

I found the way reachability properties work in TLA+ pretty hard to understand, so did my best to break it down in this post: https://ahelwer.ca/post/2026-09-26-reachability/

It could be possible to modify TLC to more easily express & check reachability properties. This could be useful for modeling eventually-consistent systems, where the property we care about is that different replicas must be able to converge to identical views of the system, not that they necessarily do converge.

Andrew Helwer

--
You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tlaplus+unsubscribe@xxxxxxxxxxxxxxxx.
To view this discussion visit https://groups.google.com/d/msgid/tlaplus/CABj%3DxUVSoo%2B_4k_7E4di7eCuDHW6xS4_ZnYSoaL6%3DAA%3D7zwmmA%40mail.gmail.com.