Boogie vs TLA+
Boogie
github.comTLA+
lamport.azurewebsites.netSide by side
| Figure | Boogie | TLA+ |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Formal Verification Tools | 8.1 (#7) | 7.5 (#24) |
| License | Boogie is licensed under the MIT License. | The TLA+ tools and Toolbox repository is licensed under the MIT License. |
| Purpose | Boogie is an intermediate modeling and verification language used as a layer for building program verifiers for other languages. | TLA+ is a high-level language for modeling software and hardware systems, especially concurrent and distributed systems. |
| Support | The project directs users to its GitHub issue tracker to ask questions and report issues. | The TLA+ Foundation directs technical questions and issues to the appropriate GitHub issue tracker. |
Plans
In their own words
Boogie
Boogie is a modeling language and tool for building program verifiers for other languages. It accepts Boogie language input, can optionally infer invariants, and generates verification conditions for an SMT solver. Z3 is the default solver; CVC5 and Yices2 support is experimental. The Civl extension lets users model concurrent and distributed systems. Boogie is self-hosted and distributed as a.NET global tool through NuGet. It requires.NET and a supported SMT solver, and the NuGet listing identifies version 3.5.7 as targeting.NET 8.0 or higher. The project uses the MIT License and is free at free. The repository names VCC and HAVOC for C, along with Dafny, Chalice, Spec#, and Move verifiers, as projects built on Boogie. Yices2 has a stated constraint: it works for unquantified fragments such as arrays, arithmetic, and bitvectors, but not for quantifiers, generalized arrays, or datatypes. Users can ask questions or report issues through the project issue tracker, and contributions are accepted through pull requests.
TLA+
TLA+ has no write-up on Specifiction yet; its figures are above.