{"id":"https://openalex.org/W7170171113","doi":"https://doi.org/10.1007/978-3-032-32519-8_8","title":"The TLA+ Model Checker Apalache","display_name":"The TLA+ Model Checker Apalache","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7170171113","doi":"https://doi.org/10.1007/978-3-032-32519-8_8"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-032-32519-8_8","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-032-32519-8_8","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-032-32519-8_8.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/978-3-032-32519-8_8.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5060648961","display_name":"Rodrigo Otoni","orcid":"https://orcid.org/0000-0003-1097-2367"},"institutions":[{"id":"https://openalex.org/I169381384","display_name":"University of Groningen","ror":"https://ror.org/012p63287","country_code":"NL","type":"education","lineage":["https://openalex.org/I169381384"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Rodrigo Otoni","raw_affiliation_strings":["University of Groningen, Groningen, Netherlands"],"raw_orcid":"https://orcid.org/0000-0003-1097-2367","affiliations":[{"raw_affiliation_string":"University of Groningen, Groningen, Netherlands","institution_ids":["https://openalex.org/I169381384"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093862778","display_name":"Shon Feder","orcid":"https://orcid.org/0000-0002-3976-3457"},"institutions":[{"id":"https://openalex.org/I4210119451","display_name":"Schneider Electric (Canada)","ror":"https://ror.org/02hj7hh93","country_code":"CA","type":"company","lineage":["https://openalex.org/I1305429183","https://openalex.org/I4210119451"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Shon Feder","raw_affiliation_strings":["Tarides, Toronto, Canada"],"raw_orcid":"https://orcid.org/0000-0002-3976-3457","affiliations":[{"raw_affiliation_string":"Tarides, Toronto, Canada","institution_ids":["https://openalex.org/I4210119451"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024592559","display_name":"Jure Kukovec","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jure Kukovec","raw_affiliation_strings":["Vienna, Austria"],"raw_orcid":"https://orcid.org/0009-0004-1094-773X","affiliations":[{"raw_affiliation_string":"Vienna, Austria","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134550295","display_name":"Andrey Kupriyanov","orcid":"https://orcid.org/0009-0005-2952-2800"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Andrey Kupriyanov","raw_affiliation_strings":["Vienna, Austria"],"raw_orcid":"https://orcid.org/0009-0005-2952-2800","affiliations":[{"raw_affiliation_string":"Vienna, Austria","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134531515","display_name":"Gabriela Moreira","orcid":"https://orcid.org/0000-0003-0275-5717"},"institutions":[{"id":"https://openalex.org/I4210124925","display_name":"Hospital Municipal S\u00e3o Jos\u00e9","ror":"https://ror.org/03cn5jj91","country_code":"BR","type":"healthcare","lineage":["https://openalex.org/I4210124925"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Gabriela Moreira","raw_affiliation_strings":["Informal Systems, Joinville, Brazil"],"raw_orcid":"https://orcid.org/0000-0003-0275-5717","affiliations":[{"raw_affiliation_string":"Informal Systems, Joinville, Brazil","institution_ids":["https://openalex.org/I4210124925"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023795924","display_name":"Philip Offtermatt","orcid":"https://orcid.org/0000-0001-8477-2849"},"institutions":[{"id":"https://openalex.org/I4210126395","display_name":"Inform (Germany)","ror":"https://ror.org/02x8c2t37","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210126395"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Philip Offtermatt","raw_affiliation_strings":["Informal Systems, Munich, Germany"],"raw_orcid":"https://orcid.org/0000-0001-8477-2849","affiliations":[{"raw_affiliation_string":"Informal Systems, Munich, Germany","institution_ids":["https://openalex.org/I4210126395"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024563097","display_name":"Thomas Pani","orcid":"https://orcid.org/0000-0002-4434-0248"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Thomas Pani","raw_affiliation_strings":["Vienna, Austria"],"raw_orcid":"https://orcid.org/0000-0002-4434-0248","affiliations":[{"raw_affiliation_string":"Vienna, Austria","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091515600","display_name":"Thi Hong Hoa Tran","orcid":"https://orcid.org/0000-0002-2260-6877"},"institutions":[{"id":"https://openalex.org/I2738703131","display_name":"Commissariat \u00e0 l'\u00c9nergie Atomique et aux \u00c9nergies Alternatives","ror":"https://ror.org/00jjx8s55","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131"]},{"id":"https://openalex.org/I277688954","display_name":"Universit\u00e9 Paris-Saclay","ror":"https://ror.org/03xjwb503","country_code":"FR","type":"education","lineage":["https://openalex.org/I277688954"]},{"id":"https://openalex.org/I4210085861","display_name":"Laboratoire d'Int\u00e9gration des Syst\u00e8mes et des Technologies","ror":"https://ror.org/000dbcc61","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131","https://openalex.org/I2738703131","https://openalex.org/I277688954","https://openalex.org/I4210085861","https://openalex.org/I4210117989"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Thanh-Hai Tran","raw_affiliation_strings":["Universit\u00e9 Paris-Saclay, CEA, List, Palaiseau, France"],"raw_orcid":"https://orcid.org/0000-0002-2260-6877","affiliations":[{"raw_affiliation_string":"Universit\u00e9 Paris-Saclay, CEA, List, Palaiseau, France","institution_ids":["https://openalex.org/I2738703131","https://openalex.org/I277688954","https://openalex.org/I4210085861"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040967690","display_name":"Igor Konnov","orcid":"https://orcid.org/0000-0001-6629-3377"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Igor Konnov","raw_affiliation_strings":["Vienna, Austria"],"raw_orcid":"https://orcid.org/0000-0001-6629-3377","affiliations":[{"raw_affiliation_string":"Vienna, Austria","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":5,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5060648961"],"corresponding_institution_ids":["https://openalex.org/I169381384"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":{"value":5000,"currency":"EUR","value_usd":5392},"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"151","last_page":"166"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":null,"topics":[],"keywords":[{"id":"https://openalex.org/keywords/liveness","display_name":"Liveness","score":0.9584000110626221},{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.847100019454956},{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.6797999739646912},{"id":"https://openalex.org/keywords/symbolic-trajectory-evaluation","display_name":"Symbolic trajectory evaluation","score":0.6525999903678894},{"id":"https://openalex.org/keywords/satisfiability-modulo-theories","display_name":"Satisfiability modulo theories","score":0.6140999794006348},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.5400000214576721},{"id":"https://openalex.org/keywords/modulo","display_name":"Modulo","score":0.48190000653266907},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.4643999934196472},{"id":"https://openalex.org/keywords/satisfiability","display_name":"Satisfiability","score":0.42260000109672546}],"concepts":[{"id":"https://openalex.org/C15569618","wikidata":"https://www.wikidata.org/wiki/Q3561421","display_name":"Liveness","level":2,"score":0.9584000110626221},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8496999740600586},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.847100019454956},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.6797999739646912},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.6568999886512756},{"id":"https://openalex.org/C23123167","wikidata":"https://www.wikidata.org/wiki/Q7661193","display_name":"Symbolic trajectory evaluation","level":3,"score":0.6525999903678894},{"id":"https://openalex.org/C164155591","wikidata":"https://www.wikidata.org/wiki/Q2067766","display_name":"Satisfiability modulo theories","level":2,"score":0.6140999794006348},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.5400000214576721},{"id":"https://openalex.org/C54732982","wikidata":"https://www.wikidata.org/wiki/Q1415345","display_name":"Modulo","level":2,"score":0.48190000653266907},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4708999991416931},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.4643999934196472},{"id":"https://openalex.org/C168773769","wikidata":"https://www.wikidata.org/wiki/Q1350299","display_name":"Satisfiability","level":2,"score":0.42260000109672546},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.4154999852180481},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.41260001063346863},{"id":"https://openalex.org/C152062344","wikidata":"https://www.wikidata.org/wiki/Q818888","display_name":"Computability","level":2,"score":0.392300009727478},{"id":"https://openalex.org/C30888246","wikidata":"https://www.wikidata.org/wiki/Q4669969","display_name":"Abstraction model checking","level":3,"score":0.383899986743927},{"id":"https://openalex.org/C116253237","wikidata":"https://www.wikidata.org/wiki/Q1437424","display_name":"Formal specification","level":2,"score":0.374099999666214},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.32429999113082886},{"id":"https://openalex.org/C195344581","wikidata":"https://www.wikidata.org/wiki/Q2555318","display_name":"Automated reasoning","level":2,"score":0.32359999418258667},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.3034999966621399},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3005000054836273},{"id":"https://openalex.org/C2776329536","wikidata":"https://www.wikidata.org/wiki/Q948666","display_name":"Promela","level":3,"score":0.2897000014781952},{"id":"https://openalex.org/C65620979","wikidata":"https://www.wikidata.org/wiki/Q7661176","display_name":"Symbolic data analysis","level":2,"score":0.28290000557899475},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.27079999446868896},{"id":"https://openalex.org/C6943359","wikidata":"https://www.wikidata.org/wiki/Q875276","display_name":"Boolean satisfiability problem","level":2,"score":0.26739999651908875},{"id":"https://openalex.org/C201677973","wikidata":"https://www.wikidata.org/wiki/Q1209840","display_name":"Specification language","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C25016198","wikidata":"https://www.wikidata.org/wiki/Q781833","display_name":"Temporal logic","level":2,"score":0.2651999890804291},{"id":"https://openalex.org/C206880738","wikidata":"https://www.wikidata.org/wiki/Q431667","display_name":"Automated theorem proving","level":2,"score":0.25110000371932983}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/978-3-032-32519-8_8","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-032-32519-8_8","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-032-32519-8_8.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"}],"best_oa_location":{"id":"doi:10.1007/978-3-032-32519-8_8","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-032-32519-8_8","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-032-32519-8_8.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7170171113.pdf","grobid_xml":"https://content.openalex.org/works/W7170171113.grobid-xml"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W200346596","https://openalex.org/W1480909796","https://openalex.org/W1533268057","https://openalex.org/W1544621933","https://openalex.org/W1973938051","https://openalex.org/W2015688007","https://openalex.org/W2125047630","https://openalex.org/W2131848219","https://openalex.org/W2143760481","https://openalex.org/W2153773928","https://openalex.org/W2780733723","https://openalex.org/W2889462571","https://openalex.org/W2894638380","https://openalex.org/W2912640545","https://openalex.org/W2969374400","https://openalex.org/W2971743981","https://openalex.org/W2983964895","https://openalex.org/W3043774277","https://openalex.org/W3095477848","https://openalex.org/W3168248440","https://openalex.org/W3168250592","https://openalex.org/W3178506813","https://openalex.org/W4225922019","https://openalex.org/W4226455345","https://openalex.org/W4256348170","https://openalex.org/W4296970626","https://openalex.org/W4309134243","https://openalex.org/W4366723917","https://openalex.org/W4383898410","https://openalex.org/W4399375744","https://openalex.org/W4406449556","https://openalex.org/W4407546744","https://openalex.org/W4410037539","https://openalex.org/W4410860092","https://openalex.org/W4412543568","https://openalex.org/W4414266939","https://openalex.org/W4414903352","https://openalex.org/W4415055474","https://openalex.org/W6890030566","https://openalex.org/W6927741196"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"The":[1,138],"TLA":[2,41,66,162],"$$^+$$":[3,42,67,163],"<mml:math":[4,43,68,164],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\">":[5,44,69,165],"<mml:msup>":[6,45,70,166],"<mml:mrow/>":[7,46,71,167],"<mml:mo>+</mml:mo>":[8,47,72,168],"</mml:msup>":[9,48,73,169],"</mml:math>":[10,49,74,170],"language":[11],"has":[12],"been":[13],"widely":[14],"used,":[15],"both":[16],"in":[17,94,113],"academia":[18],"and":[19,23,35,76,98,129,132,144,151],"industry,":[20],"to":[21,191],"specify":[22],"reason":[24],"about":[25],"distributed":[26],"systems.":[27],"This":[28],"paper":[29,139],"presents":[30],"Apalache":[31,51,109,141,175,187],",":[32],"an":[33],"efficient":[34],"flexible":[36],"symbolic":[37,61,125],"model":[38,58],"checker":[39],"for":[40,80,121,127,135,149],".":[50,171],"\u2019s":[52,110,142],"engine":[53],"is":[54,176],"based":[55],"on":[56],"bounded":[57,118,122],"checking,":[59,134],"with":[60,101,180],"transitions":[62],"being":[63,86],"extracted":[64],"from":[65,88],"specifications":[75],"verification":[77],"conditions":[78],"suitable":[79],"satisfiability":[81],"modulo":[82],"theories":[83],"(SMT)":[84],"solvers":[85],"generated":[87],"them.":[89],"Reasoning":[90],"can":[91,188],"be":[92,189],"done":[93],"terms":[95],"of":[96,174,196],"safety":[97],"liveness":[99,102],"properties,":[100],"checking":[103],"realised":[104],"via":[105],"a":[106,181,197],"liveness-to-safety":[107],"reduction.":[108],"flexibility":[111],"lies":[112],"its":[114,147],"three":[115],"complementary":[116],"functionalities:":[117],"exhaustive":[119],"verification,":[120],"guarantees,":[123],"randomised":[124],"execution,":[126],"prototyping":[128],"bug":[130],"detection,":[131],"inductiveness":[133],"unbounded":[136],"guarantees.":[137],"describes":[140],"architecture":[143],"features,":[145],"including":[146],"support":[148],"PlusCal":[150],"Quint,":[152],"two":[153],"languages":[154],"that":[155],"share":[156],"the":[157,193],"same":[158],"semantic":[159],"foundation":[160],"as":[161],"Industrial":[172],"usage":[173],"also":[177],"presented,":[178],"together":[179],"case":[182],"study":[183],"which":[184],"illustrates":[185],"how":[186],"used":[190],"verify":[192],"agreement":[194],"property":[195],"consensus":[198],"protocol.":[199]},"counts_by_year":[],"updated_date":"2026-07-24T06:07:23.975819","created_date":"2026-07-24T00:00:00"}