Modeling B-Trees in TLA+ (surfingcomplexity.blog)