Doug Woos, James R. Wilcox, Steve Anton, Zachary Tatlock, Michael D. Ernst, Thomas E. Anderson: Planning for change in a formal verification of the raft consensus protocol. CPP 2016: 154-165