paralin

Model your whole program in TLA+, with each spec beside the code it describes, checked by tla-ts. Then simplify the spec and the code together.