Wolf, goat and cabbage problem TLA+ modeling | Dark Hacker News