writing correct lock-free and distributed stateful systems in Rust, assisted by TLA+ - View it on GitHub