eXtreme Modelling in Practice · HackerPapers discussions

eXtreme Modelling in Practice — mentioned by hwayne

Mon, 02 Jun 2025 14:34:14 GMT

With one client I have, we know the TLA+ model is accurate because we're extracting tests directly from the spec. It's kind of a riff on what MongoDB does in this paper: https://arxiv.org/abs/2006.00915

Paper and discussion history. A mention is not an endorsement.

eXtreme Modelling in Practice — mentioned by hwayne

Thu, 17 Oct 2024 18:49:43 GMT

You can use the TLA+ spec to generate a test suite: https://arxiv.org/abs/2006.00915

Paper and discussion history. A mention is not an endorsement.

eXtreme Modelling in Practice — mentioned by hwayne

Wed, 31 Jul 2024 15:03:02 GMT

In addition to what everybody else is saying about the value of having a spec at all, there's a lot of exciting developments now in using a spec to generate a test suite, which is way simpler than using a spec to generate production code. Example: https://arxiv.org/abs/2006.00915

Paper and discussion history. A mention is not an endorsement.

eXtreme Modelling in Practice — mentioned by aseipp

Mon, 03 Jul 2023 21:53:47 GMT

Yes, I managed to find it: "eXtreme Modeling in Practice" https://arxiv.org/pdf/2006.00915.pdf Unfortunately I got the product wrong; it was not Atlas, it was Realm Sync. All of the test-case generation stuff is in Section 5.

Paper and discussion history. A mention is not an endorsement.

eXtreme Modelling in Practice — mentioned by hwayne

Wed, 28 Sep 2022 21:06:34 GMT

The universal problem is "generating code from a formal spec" is extremely, maddeningly, pull-your-hair-outingly hard. A slightly easier thing, as you said, generating test cases, which is what the Mongo people have been advancing: https://arxiv.org/abs/2006.00915 (Another interesting approach in this space is P, which is lower-level than TLA+ but also can compile to C#: https://github.com/p-org/P)

Paper and discussion history. A mention is not an endorsement.