Practical TLA+: Planning Driven Development