Specifying Systems: The Tla+ Language and Tools for Hardware and Software Engineers Quotes