Using TLA+ in the Development of a Safety-Critical Fault-Tolerant Middleware
Ringing out fault tolerance. A new ring network for superior low-cost dependability