updated tla+ specifications