tla-plus

Easiest-ever formal methods language! Designed for developers crafting distributed systems, microservices, and cloud applications

Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.

Personal reading list/reference re: TLA+

An instructional website with progressively worked examples of TLA+ specifications and model checking.

Multi-agent coding orchestrator with quorum consensus and formal verification (TLA+, Alloy, PRISM) for Claude Code, OpenCode, and Gemini CLI. Fewer hallucinations, fewer blind spots, mathematically proven protocols.

Convert TLA+ output (and values) into JSON

Find, prove and control the AI agents on your machines: discovers every agent and what it can reach, proves policies with Z3 + TLA+, enforces them deterministically outside the model.

A modern specification language and model checker for concurrent and distributed systems. Faster than TLA+/TLC.

The TLA+ Video Course by Leslie Lamport

MAREF: Multi-Agent Recursive Evolution Framework — Agent Governance Operating System

📜 WIP Hop Protocol TLA+ Specification

A collection of various TLA+ examples and helper functions for learning.

Atomic concepts & compositions thereof, expressed as structured natural language. Code is derived; intent is canonical. This is Intent-Driven Design (IDD) — author the intent first, upstream of how any system is built. Named for Grace Hopper, who argued business logic should be readable by the people who understand the business.

Measurement automation framework for physics labs (NMR/ODMR) with AI/MCP control — plus standalone dual-licensed lock-free STM (kamestm) and pool allocator (kamepoolalloc), TLA+/GenMC verified

A TLA+ Specification of Peterson's Algorithm

Bitcoin layer 2 contracts specifications using TLA+

Mathematical proof of Solana's Alpenglow consensus protocol with 100% verification success.

Security-first workflows for coding agents. Skills, playbooks and subagents that make Claude Code, Cursor, Codex, Gemini CLI, Copilot and 10 more agents threat-model, review and verify their work before they ship.

Recovery-aware ownership coordination framework for atomic-free, non-coherent shared memory

Transparent fault tolerance for unmodified servers as a byproduct of in-network total-order communication.