@nuukaset lamport wanted them to use a theorem prover but afaik TLAPS never really materialized as a whole product. its there, incomplete, and they just run the brute force part.
i think i looked at a similar design that sadly did a lot of the same. use lua calls to generate new graph nodes, and the runtime harness tries its best to schedule which frontiers to check in some configurable way.
then again TLA+ wants to prove a model is safe whereas graphstrolabe was more meant for discovering strategies