Published September 3, 2019 at 4701 × 272 in Formal Analysis of the CBC Casper Consensus Algorithm with TLA+