Lobsters: Proving liveness with TLA