I have a new blog post! This is a response to the current formal methods hype and explains what TLA+ is good for and what it's not designed to check.
buttondown.com/hillelwayne/...
buttondown.com
What TLA+ can and can't check
Let's chill just a little bit on the "TLA+ will save AI from itself" narrative