A TLA+/PlusCal formalization of the algorithm described in "Paxos Made Simple". It is almost a copy of this specification, except there are a few tweaks and simplifications: https://lamport.azurewebsites.net/tla/PConProof.tla.
NOTE: It seems that the previous version of the specification was wrong...