spacejam/tla-rust

writing correct lock-free and distributed stateful systems in Rust, assisted by TLA+