Hi, lots of talk about TLA+ lately, so I just published my work on the topic. The tool checks an agent harness design and its recorded runs to find invariant breaks. I believe it will help make your code hold up under retries and crashes. Sure you know your invariants?