IronFleet: Proving Practical Distributed Systems Correct [pdf]research.microsoft.com23 pointsluu11 years ago