A Formal Proof of The Chandy--Lamport Distributed Snapshot Algorithmby Ben Fiedler and Dmitriy Traytel21 Jul