Proving the Correctness of Disk Paxos

Mauro Jaskelioff 🌐 and Stephan Merz 🌐

June 22, 2005

This is a development version of this entry. It might change over time and is not stable. Please refer to release versions for citations.


Disk Paxos is an algorithm for building arbitrary fault-tolerant distributed systems. The specification of Disk Paxos has been proved correct informally and tested using the TLC model checker, but up to now, it has never been fully formally verified. In this work we have formally verified its correctness using the Isabelle theorem prover and the HOL logic system, showing that Isabelle is a practical tool for verifying properties of TLA+ specifications.


BSD License


Session DiskPaxos