Are there any good resources on the algorithm TLC uses to model-check temporal properties? Safety invariants are easy enough (just BFS/DFS through all states) but temporal properties seem like they have a ton of edge cases.
I'm looking for something with enough detail that I could implement the algorithm in my own toy model-checker.
Andrew