https://www.microsoft.com/en-us/research/publication/ironfle...
It uses TLA for the distributed protocol part, and Hoare style verification for sequential code, which has excellent toolchain support.
https://www.microsoft.com/en-us/research/publication/ironfle...
It uses TLA for the distributed protocol part, and Hoare style verification for sequential code, which has excellent toolchain support.