Никита Синяченко, Евгений Чернацкий — TLA+ для эффективного тестирования распределенных систем, Video, Source code
Model Checking Cache Coherence in System-Level Code - Nicholas Allen and Yang Zhao, Oracle Labs Brisbane, June 2016 PDF
Modelator is a tool that enables automatic generation of tests from models. Modelator takes TLA+ models as its input and generates tests that can be executed against an implementation of the model.
Kayfabe: Model-based program testing with TLC - Star Dorminey, Video, PDF