What TLA+ can and can't check

The article discusses the capabilities and limitations of the TLA+ formal verification tool, a popular method for checking the correctness of software and systems. TLA+ is a formal specification language that allows users to write rigorous and unambiguous descriptions of complex systems, making it easier to reason about their behavior. The author argues that TLA+ is well-suited for checking properties of systems that involve concurrency, communication protocols, and distributed systems, but may struggle with checking properties that rely heavily on human judgment, such as user experience or aesthetics. Additionally, TLA+ is not a substitute for testing or debugging, but rather a complementary tool that can help ensure the correctness of a system's design and implementation.