What are the Rosettas of formal specification?

Happy new year everyone! I released the first Logic for Programmers alpha six months ago. There's since been four new versions since then, with the November release putting us in beta. Between work and holidays I didn't make much progress in December, but there will be a 0.6 release in the next week or two. People have asked me if the book will...

Channukah's next week and that means my favorite pastime, complaining about how Dreidel is a bad game. Last year I formally modeled it in PRISM to prove the game's not fun. But because I limited the model to only a small case, I couldn't prove the game was truly bad. It's time to finish the job. The Story so far You can read the last year's...

Just finished two weeks of workshops and am exhausted, so this one will be light. Hanuka Sale Logic for Programmers is on sale until the end of Chanukah! That's Jan 2nd if you're not Jewish. Get it for 40% off here. Stroustrup's Rule I first encountered Stroustrup's Rule on this defunct webpage: One of my favorite insights about syntax design...

Just finished two weeks of workshops and am exhausted, so this one will be light. Hanuka Sale Logic for Programmers is on sale until the end of Chanukah! That's Jan 2nd if you're not Jewish. Get it for 40% off here. Stroustrop's Rule I first encountered Stroustrop's Rule on this defunct webpage: One of my favorite insights about syntax design...

I wrote about hyperproperties on my blog four years ago, but now an intriguing client problem got me thinking about them again.1 We're using TLA+ to model a system that starts in state A, and under certain complicated conditions P, transitions to state B. They also had a flag f that, when set, used a different complicated condition Q to check the...