description Add a TLA+ model to a Java project, so that TLC checks the invariants its core logic must keep (an order lifecycle, a saga, a circuit breaker, a lease, an idempotency key, a workflow) over ...