The TLA<sup> + </sup> Proof System: Building a Heterogeneous Verification Platform
K. Chaudhuri, D. Doligez, L. Lamport, and S. Merz. Theoretical Aspects of Computing – ICTAC 2010, volume 6255 of Lecture Notes in Computer Science, Springer Berlin / Heidelberg, 10.1007/978-3-642-14808-8_3.(2010)