I have to thank @Hillelogram here for introducing his Twitter following to TLA+. The whole concept doesn't look that wild, but even just a superficial knowledge of it just helped me out by a surprising amount Started playing around with TLA+ a few days ago, wrote a 70 line spec today (this would probably be a lot shorter if I actually knew what I was doing), and while it didn't show me a fundamental flaw in my system, it helped me realize and check that some mutexes were redundant.