Wolf, goat and cabbage problem TLA+ modeling | Hacker News Reader