The hardest thing for programmers learning TLA⁺ is internalising that it is not similar to programming. The goals are different, the scope is different, the language's design requirements and concerns are different, the experience is different, the workflow is different.
This also sets TLA⁺ apart from similarly-rich logics with proof assistants and/or model checkers that *are* based on programming, like Lean or Agda, and SPIN's Promella or NuSMV's language.
-
-
-
Yes, Lean is for serious formal "high" mathematics. I think it took me the same amount of time to learn TLA⁺ from scratch and write my first non-trivial spec as it took me to understand how quantifiers work in Lean, though.
- Još 2 druga odgovora
Novi razgovor -
-
-
You can implement TLA+’s logic in Lean. Lean is more like math that you happen to be able to write programs in. To put it simply.
I get what you’re saying though. It’s similarity hard for programmers to grasp Lean and the separation between program and specification.Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.