Planning for change in a formal verification of the raft consensus protocol. - Doug Woos; James R. Wilcox; Steve Anton; Zachary Tatlock; Michael D. Ernst; Thomas E. Anderson (CPP, 2016)