← Sunday, September 27, 2026ArchitectureDeep dive

TLA⁺ can express reachability by quantifying over behavior prefixes

ahelwer.ca 12 min read Editor score 7/10

The explanation distinguishes a property that eventually holds on every behavior from one that remains reachable after every behavior prefix. That distinction matters when formally specifying guarantees such as the ability to shut down or change a password.

What

TLA⁺ can express reachability as the ability to reach a state from every behavior prefix, rather than requiring that state to occur on every behavior.

How

The post describes Lamport's `ENABLED [Next]_v^+` formulation, where one or more `Next` steps or stuttering can reach the target state.

Why it matters

This distinction helps engineers specify system capabilities such as whether a user can always change a password, beyond checking deadlocks.

Read on ahelwer.ca → Lobsters

Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.