Separately, it is limited in the system it can model.
Separately, it is limited in the system it can model.
My claim here is the very boring one that it scales better than we currently suspect in practice in those cases.
My claim here is the very boring one that it scales better than we currently suspect in practice in those cases.
An interesting historical note here is that Lamport sort of swept this problem under the rug in TLA.
An interesting historical note here is that Lamport sort of swept this problem under the rug in TLA.
Splitting up an exponentially growing state space turns out to be a performance win ☺️
Anyway, we’re doing the mechanization of semantics & theorems at work right now.
Splitting up an exponentially growing state space turns out to be a performance win ☺️
Anyway, we’re doing the mechanization of semantics & theorems at work right now.