Verifying Fault-Tolerant Distributed Algorithms in the Heard-Of Modelby Henri Debrat and Stephan Merz27 Jul