TLA+ is a formal specification language developed to design, model, document, and verify reactive systems.