TLA+ does not do what you think it does.