GenMC: Model checking for concurrent C programs

How we prevent conflicts in authoritative DNS configuration using formal verification

Rust Foundation Collaborates with AWS to Verify Rust Standard Libraries

Model checking safety of Ben-Or’s Byzantine consensus with Apalache

A Liveness Example in TLA+

It's not enough for a program to work – it has to work for the right reasons

Specifying serializability in TLA+

An unexpected discovery: Automated reasoning often makes systems more efficient and easier to maintain

TLA+ Wiki

The RAISE specification language, method, and tools