[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[tlaplus] Re: Is TLA spec shorter than code?

Thanks all for your answer!
I had this impression that TLA+ spec would be way shorter than the actual program. I think that come from Newcombie's comments on this paper introducing TLA+, and it also comes from Leslie's mention on his video course that TLA+ could be short abstraction.
If I understand this correctly, Leslie's point is TLA+ may be or not be shorter than the program, since they're not comparable, but the resulting program would definitely be short than the one without TLA+ thinking applied.
I believe the above statement is true, I have heard it many times from multiple sources, the video course, the Practical TLA+ book, the papers. But I don't ever see a concrete example of how a long program is shorten and better designed by applying TLA+ abstraction. Do you mind point me to one such example ?

You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tlaplus+unsubscribe@xxxxxxxxxxxxxxxx.
To post to this group, send email to tlaplus@xxxxxxxxxxxxxxxx.
Visit this group at https://groups.google.com/group/tlaplus.
To view this discussion on the web visit https://groups.google.com/d/msgid/tlaplus/58d738f1-851e-4b05-97b1-6ba29419e9bd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.