quint-co / quint

An executable specification language with delightful tooling based on the temporal logic of actions (TLA)

apalache-mc / apalache

APALACHE: symbolic model checker for TLA+ and Quint