Modeling Systems With Tla+ And Ladder Logic