TLA from First Principles

(buttondown.com)

103 points | by ingve a year ago ago

24 comments

  • larsrc a year ago

    TLA Will always mean Three Letter Acronym in my book. It took many link hops to find an actual definition, I finally found it in Leslie's first paper on the subject. PEYA, people! Please Explain Your Acronyms!

    • bubblyworld a year ago

      Temporal Logic of Actions, to fix the irony here.

    • beardbound a year ago

      I've seen this more and more in recent memory. I feel like the standard used to be define an acronym the first time you use it, then you can use it without explanation.

      Such as the TLA (three letter acronym) used here.

    • Jtsummers a year ago

      > I stumbled on a great way to explain the temporal logic of actions that TLA+ is based on. [emphasis added]

      I mean, it's spelled out right there in the post so what's the complaint? And I double checked, that's copied from the email on Tuesday so not a later addition. He does seem to have changed it on the page for people who don't want to read so now the T, L, and A in the words are capitalized and bolded.

      • larsrc a year ago

        Wow, I totally missed that. Sorry.

    • deskr a year ago

      DIYOAJFTSOI, dude! (Don't invent your own acronyms just for the sake of it)

      • drewcoo a year ago

        TIMTOWTDI!

        Pythonistas, feh!

  • wslh a year ago

    These articles are fantastic for people like me who want a quick, hands-on taste of TLA/TLA+ (or similar languages/technologies) and then move on—while letting the neurons hold onto the lesson to revisit later, even as it continues to sink in slowly.

  • tombert a year ago

    I gotta say that I am jealous of how prolific Hillel is; I have no idea how he manages to find the time and not burn out.

    As usual, a good blog post.

  • mrkeen a year ago

    Can anyone provide an intuitive use-case for including stuttering in a model?

    I get that you can't model what 'eventually' happens: will a purchase flow end in a good state? NOT IF THE USER WAITS FOR AN INFINITE AMOUNT OF TIME BEFORE CLICKING THE 'BUY' BUTTON!

    So the first thing I always have to do is turn off that nonsense so I can get back to modelling the purchase flow.

    Any counter examples?

    • hwayne a year ago

      The main reason for stuttering is it makes composing specs a lot easier. Say you have two specs, one which is [](x' = x + 1) and one which is [](y' = y + 1). If you put the two together, you get [](x' = x + 1) && [](y' = y + 1), meaning both are always synchronized. If both also have stutter steps, though, you also get interleaving, where on a step only of the two increments.

    • hansvm a year ago

      Fair locking is a classic example. Stuttering can happen at a hardware level, and you need to create a composite data structure / algorithm which is correct regardless.

    • thaumasiotes a year ago

      > will a purchase flow end in a good state? NOT IF THE USER WAITS FOR AN INFINITE AMOUNT OF TIME BEFORE CLICKING THE 'BUY' BUTTON!

      You seem to be presenting this as a ridiculous thing to consider, but it's very common behavior.

      Visit the site, add something to your cart, close the tab, never come back.

      What am I missing?

      • mrkeen a year ago

        > What am I missing?

        A use-case for the <> "eventually" operator.

  • skybrian a year ago

    This is a great introduction. I liked the pseudocode better than TLA syntax, though, so I think if I needed something like this, I would look into alternatives to TLA itself.

  • djoldman a year ago

    @hwayne, thanks for the explanation.

    Can you explain how a time-step without a transaction is handled by the final TLA+ code?

    My confusion stems from:

      Next ==
      AliceToBob
      \/ BobToAlice
    
    ...so does it matter which "pathway is taken"? This reminds me of context free grammars / PEG grammars.
    • a year ago
      [deleted]
    • itishappy a year ago

      Same question. Is stuttering now handled by the next line somehow?

          Spec == Init /\ [][Next]_vars
      
      Edit: Answered in the paragraph below the TLA+ code:

      > The only thing that's "unusual" (besides == for definition) is the [][Next]_vars bit. That's TLA+ notation for [](Next || Stutter): Next or Stutter always happens.

      I guess the `_vars` notation is shorthand for stutter. Anyone know where I can learn more?

    • sriram_malhar a year ago

      No, it doesn’t matter. All paths are explored

  • justanotheratom a year ago

    TLA - now this is something I could use a coding copilot for..