Verified Transpilation with Claude

We can check correctness of a TLA+ specification using the TLC model checker, which will exhaustively explore a spec’s reachable states to check that a specified property (i.e. an invariant) holds. TLC was originally developed over 20 years ago and has had a lot of development effort put into it. It is a mature and performant tool, but it is written in Java and it is essentially a dynamic…