Finding bugs in Raft implementations | Antithesis
antithesis.com
Why formal verification is not enough to maintain consensus in real systems