Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The problem with TLA+ is that you still have to hand translate your solution to C++/C#/Java/…

Using Dafny (for example) gives you the advantages of TLA+ combined with proven correct running code.



Dafny is cool, but I believe they tackle different problem spaces. For example, how would you verify a distributed algorithm with Dafny?



Thanks, Hillel. I brought a speculation to a citation fight -- I'm glad you won :) Seriously, this is a very interesting read.


You absolutely can. TLA+ is basically a state transition system. Something you can write in Dafny and prove correct using its Refinement types. And the end result is running software you can drop right into production.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: