Stack correctness
Seqno layer
FIFO
total
unreliable
Token layer
For example:
Seqno
Token
Once you’ve proved a few layers correct, it’s relatively easy to build a correct stack.