Formal Specification of a Web Services Protocol
James E. Johnson, David E. Langworthy, Leslie Lamport, Friedrich H. Vogt · Electronic Notes in Theoretical Computer Science · 2004
We describe a use of formal methods to specify and check a Web Services protocol. The Web Services Atomic Transaction protocol was specified in TLA+ and checked with the TLC model checker. A modest effort revealed oversights that caused unanticipated behaviors of the protocol; these were corrected by clarifications and changes to the protocol.