Or it might be that the model doesn't really avoid all possible human failures w...

		pjmlp 64 days ago \| parent \| context \| favorite \| on: Reproducing the AWS Outage Race Condition with a M... Or it might be that the model doesn't really avoid all possible human failures when translating TLA+ into Java, C++ metatemplate programming, or whatver.