when we rebuilt depot registry's garbage collector, tlc checked 14m+ states in 21 minutes and verified in the model that a committed manifest never loses its blob. wito walks through the whole gc model and how to run one yourself. depot.dev/blog/tla-ver...
depot.devImproving system safety with Temporal Logic of Actions (TLA+)Formal verification never seemed worth it: writing a faithful TLA+ spec took too long. But now agents can write the spec from your code. We tried it on the rebuilt Depot Registry garbage collector, an...
0 reposts0 likes