A formal model of composing components: the TLA+ approach

In this paper, a method for writing composable TLA⁺ specifications that conform to the formal model called Masaccio is introduced. Specifications are organized in TLA⁺ modules that correspond to Masaccio components by means of a trace-based semantics. Hierarchical TLA⁺ specifications are built from atomic component specifications by parallel and serial composition that can be arbitrary nested. While the rule of parallel composition is a variation of the classical joint-action composition, the authors do not know about a reuse method for the TLA⁺ that systematically employs the presented kind of a serial composition. By combining these two composition rules and assuming only the noninterleaving synchronous mode of an execution, the concurrent, sequential, and timed compositionality is achieved.