Using TLA+ to verify code running in production | Hacker News Reader