Engberg, et al.. Mechanical Verification of Concurrent Systems with TLA. Springer Berlin Heidelberg, 1993, doi:10.1007/3-540-56496-9_5.