Building Barista—Part 2: Formal Verification and TLA+

The author examines how formal verification using TLA+ helped uncover a hidden bug in a daily email delivery system called Barista, despite all standard tests passing. The investigation revealed that using a daily idempotency key caused missed emails when tasks slipped past midnight UTC. The author argues that rising coding agent capabilities may make formal verification much more mainstream for software engineering. Open article →