Verifying Hyperproperties With TLA | IEEE Conference Publication | IEEE Xplore