IronFleet: Proving Practical Distributed Systems Correct [pdf]andrew.cmu.edu1 pointtodsacerdoti6 months ago