We gratefully acknowledge support from
the Simons Foundation and member institutions.

No authors of 1011.2560 can endorse.

Verifying Safety Properties With the TLA+ Proof System

Kaustuv Chaudhuri, Damien Doligez, Leslie Lamport and Stephan Merz are not registered as owners of this paper. (why?)