C. Models and .. , 106 10.6.2 Serialisability (SER) Causal Consistency (CC), Eventual Consistency (EC), vol.108, issue.108, p.10

J. Daniel and . Abadi, Consistency Tradeoffs in Modern Distributed Database System Design: CAP is Only Part of the Story Abrial. A system development process with event-b and the rodin platform, Proceedings of the Formal Engineering Methods 9th International Conference on Formal Methods and Software Engineering, ICFEM'07, pp.37-42, 2007.

A. Adya, Weak Consistency: A Generalized Theory and Optimistic Implementations for Distributed Transactions, 1999.

M. Ahamad, G. Neiger, J. E. Burns, P. Kohli, and P. W. Hutto, Causal memory, pp.37-49, 1995.
DOI : 10.1007/BFb0022435

P. Masoud-saeida-ardekani, M. Sutra, and . Shapiro, Non-Monotonic Snapshot Isolation: scalable and strong consistency for geo-replicated transactional systems, 32nd Symposium on Reliable Distributed Systems (SRDS), pp.163-172, 2013.

H. Attiya, F. Ellen, and A. Morrison, Limitations of highly-available eventuallyconsistent data stores Semantics-based concurrency control: beyond commutativity, Symp. on Principles of Dist. Comp. (PODC), pp.385-394163, 1992.

P. Bailis, A. Davidson, A. Fekete, A. Ghodsi, and M. Joseph, Hellerstein, and Ion Stoica. Highly available transactions: Virtues and limitations, Proc. VLDB Endow, pp.181-192, 2013.

P. Bailis and K. Kingsbury, The network is reliable, Communications of the ACM, vol.57, issue.9, 2014.
DOI : 10.1145/2643130

M. G. Baker, J. H. Hartman, M. D. Kupfer, K. W. Shirriff, and J. K. Ousterhout, Measurements of a distributed file system, Proceedings of the Thirteenth ACM Symposium on Operating Systems Principles, SOSP '91, pp.198-212, 1991.

S. Balasubramaniam and B. C. Pierce, What is a file synchronizer? In Int, Conf. on Mobile Comp. and Netw. (MobiCom '98, 1998.

V. Balegas, N. Preguiça, R. Rodrigues, S. Duarte, C. Ferreira et al., Putting consistency back into eventual consistency, Proceedings of the Tenth European Conference on Computer Systems, EuroSys '15, pp.1-6, 2015.
DOI : 10.1145/2517349.2522729
URL : https://hal.archives-ouvertes.fr/hal-01109719

M. Preguiça, M. Shapiro, and . Najafzadeh, Extending eventually consistent cloud databases for enforcing numeric invariants. CoRR, abs/1503, p.9052, 2015.

D. Barbará-millá and H. Garcia-molina, The demarcation protocol: A technique for maintaining constraints in distributed database systems, The VLDB Journal, vol.11, issue.4
DOI : 10.1007/BF01232643

B. Inc, Using strong consistency in Riak. https://docs.basho.com/riak, 2015.

H. Berenson, P. Bernstein, J. Gray, J. Melton, E. O. Neil et al., A critique of ANSI SQL isolation levels, Int. Conf. on the Mgt. of Data (SIGMOD), pp.1-10, 1995.

H. Berenson, P. Bernstein, J. Gray, J. Melton, E. O. Neil et al., A critique of ansi sql isolation levels, Proceedings of the 1995 ACM SIGMOD International Conference on Management of Data, SIGMOD '95, pp.1-10, 1995.

P. Bernstein, V. Radzilacos, and V. Hadzilacos, Concurrency Control and Recovery in Database Systems, 1987.

A. Philip, N. Bernstein, and . Goodman, Multiversion concurrency control?theory and algorithms, ACM Transactions on Database Systems, vol.8, issue.4, pp.465-483, 1983.

N. Biri and D. Galmiche, Models and Separation Logics for Resource Trees, Journal of Logic and Computation, vol.17, issue.4, pp.687-726, 2007.
DOI : 10.1093/logcom/exm019
URL : https://hal.archives-ouvertes.fr/hal-00176793

K. Birman and T. A. Joseph, Reliable communication in the presence of failures, ACM Transactions on Computer Systems, vol.5, issue.1
DOI : 10.1145/7351.7478

N. Bjørner, Models and Software Model Checking of a Distributed File Replication System, Formal Methods and Hybrid Real-Time Systems, pp.1-23, 2007.
DOI : 10.1007/978-3-540-75221-9_1

C. Calcagno, D. Distefano, P. W. Hearn, and H. Yang, Footprint Analysis: A Shape Analysis That Discovers Preconditions, Proceedings of the 14th International Conference on Static Analysis, SAS'07, pp.402-418, 2007.
DOI : 10.1007/978-3-540-74061-2_25
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.123.3979

A. T. Clements, M. F. Kaashoek, N. Zeldovich, R. T. Morris, and E. Kohler, The scalable commutativity rule: Designing scalable software for multicore processors, Symp. on Op. Sys. Principles (SOSP), pp.1-17, 2013.

J. C. Corbett, J. Dean, M. Epstein, A. Fikes, C. Frost et al., Spanner, Symp. on Op. Sys. Design and Implementation (OSDI), pp.251-264, 2012.
DOI : 10.1145/2518037.2491245

S. B. Davidson, H. Garcia-molina, and D. Skeen, Consistency in a partitioned network: a survey, ACM Computing Surveys, vol.17, issue.3, pp.341-370, 1985.
DOI : 10.1145/5505.5508

G. Decandia, D. Hastorun, M. Jampani, G. Kakulapati, A. Lakshman et al., Dynamo: Amazon's highly available key-value store, Symp. on Op. Sys. Principles (SOSP), volume 41 of Operating Systems Review Assoc. for Computing Machinery, pp.205-220, 2007.

A. Achraf, E. Ghazi, and M. Taghdiri, Analyzing alloy constraints using an smt solver: A case study, 5th International Workshop on Automated Formal Methods (AFM), 2010.

G. Ernst, G. S. , D. Haneberg, J. Pfähler, and W. Reif, Verification of a Virtual Filesystem Switch, Lecture Notes in Computer Science, pp.242-261, 2014.
DOI : 10.1007/978-3-642-54108-7_13

A. Fekete, Allocating isolation levels to transactions, Proceedings of the twenty-fourth ACM SIGMOD-SIGACT-SIGART symposium on Principles of database systems , PODS '05, 2005.
DOI : 10.1145/1065167.1065193
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.598.8730

L. Freitas, Z. Fu, and J. Woocock, Posix file store in z/eves: an experiment in the verified software repository, Engineering Complex Computer Systems 12th IEEE International Conference on, pp.3-14, 2007.

L. Freitas, J. Woodcock, and A. Butterfield, POSIX and the Verification Grand Challenge: A Roadmap, 13th IEEE International Conference on Engineering of Complex Computer Systems (iceccs 2008), pp.153-162, 2008.
DOI : 10.1109/ICECCS.2008.35

H. Garcia-molina and G. Wiederhold, Read-only transactions in a distributed database, ACM Transactions on Database Systems, vol.7, issue.2, pp.209-234, 1982.
DOI : 10.1145/319702.319704

S. Gilbert and N. Lynch, Brewer's conjecture and the feasibility of consistent, available, partition-tolerant web services, ACM SIGACT News, vol.33, issue.2, pp.51-59, 2002.
DOI : 10.1145/564585.564601

D. Gómez, F. , and M. Yabandeh, A critique of snapshot isolation, Euro

A. Gotsman, H. Yang, C. Ferreira, M. Najafzadeh, and M. Shapiro, 'Cause I'm strong enough: Reasoning about consistency choices in distributed systems, Symp. on Principles of Prog. Lang. (POPL), 2016.
DOI : 10.1145/2914770.2837625
URL : https://hal.archives-ouvertes.fr/hal-01243192

J. Gray, P. Helland, O. Patrick, D. Neil, and . Shasha, The dangers of replication and a solution, Int. Conf. on the Mgt. of Data (SIGMOD), pp.173-182, 1996.

J. Gray and L. Lamport, Consensus on transaction commit, ACM Transactions on Database Systems, vol.31, issue.1, pp.133-160, 2006.
DOI : 10.1145/1132863.1132867
URL : http://arxiv.org/abs/cs/0408036

R. Guy, J. S. Heidemann, W. Mak, G. J. Popek, and D. Rothmeier, Implementation of the ficus replicated file system, USENIX Conference Proceedings, pp.63-71, 1990.

C. Haogang, Z. Daniel, C. Tej, C. Adam, K. M. Frans et al., Using crash hoare logic for certifying the fscq file system, Proceedings of the 25th Symposium on Operating Systems Principles, SOSP '15, pp.18-37, 2015.

M. Herlihy and E. Koskinen, Transactional boosting, Proceedings of the 13th ACM SIGPLAN Symposium on Principles and practice of parallel programming , PPoPP '08, pp.207-216, 2008.
DOI : 10.1145/1345206.1345237

M. Herlihy and J. Wing, Linearizability: a correctness condition for concurrent objects, ACM Transactions on Programming Languages and Systems, vol.12, issue.3, pp.463-492, 1990.
DOI : 10.1145/78969.78972
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.142.5315

C. A. Hoare, An axiomatic basis for computer programming, Communications of the ACM, vol.12, issue.10, pp.576-580, 1969.
DOI : 10.1145/363235.363259
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.116.2392

J. Hughes, Specifying a visual file system in z, Formal Methods in HCI: III, IEE Colloquium on, pp.3-4, 1989.

R. Paul, R. H. Johnson, and . Thomas, The maintenance of duplicate databases, Internet Request for Comments RFC Information Sciences Institute, vol.677, 1976.

R. Johnson, I. Pandis, R. Stoica, M. Athanassoulis, and A. Ailamaki, Aether, Proc. VLDB Endow, pp.681-692, 2010.
DOI : 10.14778/1920841.1920928

C. B. Jones, Specification and design of (parallel) programs, IFIP Congress, 1983.

K. Viktor-kuncak-konstantine-arkoudas, M. Zee, and . Rinar, Verifying a file system implementation Consistency rationing in the cloud: Pay only when it matters, Formal Methods and Software Engineering Proc. VLDB Endow, pp.373-390253, 2004.

D. Kriangsak, B. Michael, and A. Jean-raymond, Modelling and proof of a tree-structured file system in event-b and rodin, Proceedings of the 10th International Conference on Formal Methods and Software Engineering, ICFEM '08, pp.25-44, 2008.

M. Kulkarni, D. Nguyen, D. Prountzos, X. Sui, and K. Pingali, Exploiting the commutativity lattice, Conf. on Prog. Lang. Design and Implementation Assoc. for Computing Machinery, pp.542-555, 2011.
DOI : 10.1145/1993498.1993562

M. Kulkarni, K. Pingali, G. Ramanarayanan, B. Walter, K. Bala et al., Optimistic parallelism benefits from data partitioning, Proceedings of the 13th International Conference on Architectural Support for Programming Languages and Operating Systems, ASPLOS XIII, pp.233-243, 2008.
DOI : 10.1145/1353534.1346311
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.187.7900

P. Kumar and M. Satyanarayanan, Flexible and safe resolution of file conflicts, Usenix Tech. Conf, 1995.

L. Lamport, Time, clocks, and the ordering of events in a distributed system, Communications of the ACM, vol.21, issue.7, pp.558-565, 1978.
DOI : 10.1145/359545.359563

L. Lamport, The temporal logic of actions, ACM Transactions on Programming Languages and Systems, vol.16, issue.3, pp.872-923, 1994.
DOI : 10.1145/177492.177726

L. B. Hustonand and P. Honeyman, Disconnected operation for afs, USENIX Conference Proceedings, pp.1-10, 1993.

K. Rustan and M. Leino, Automating induction with an smt solver, Proceedings of the 13th International Conference on Verification, Model Checking, and Abstract Interpretation, VMCAI'12, pp.315-331, 2012.

C. Li, J. Leitão, A. Clement, N. Preguiça, R. Rodrigues et al., Automating the choice of consistency levels in replicated systems, Proceedings of the 2014 USENIX Conference on USENIX Annual Technical Conference, USENIX ATC'14, pp.281-292, 2014.

C. Li, D. Porto, A. Clement, J. Gehrke, N. Preguiça et al., Making geo-replicated systems fast as possible, consistent when necessary, Symp. on Op. Sys. Design and Implementation (OSDI), pp.265-278, 2012.

W. Lloyd, M. J. Freedman, M. Kaminsky, and D. G. Andersen, Don't settle for eventual, Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles, SOSP '11, pp.401-416, 2011.
DOI : 10.1145/2043556.2043593

D. Lomet, Simple, robust and highly concurrent b-trees with node deletion, Proceedings. 20th International Conference on Data Engineering, pp.18-28, 2004.
DOI : 10.1109/ICDE.2004.1319981

P. Mahajan, L. Alvisi, and M. Dahlin, Consistency, availability, and convergence, 2011.

. Microsoft, Consistency levels in DocumentDB. https://azure.microsoft.com/en-us/ documentation/articles/documentdb-consistency-levels, 2015.

C. Morgan and B. Sufrin, Specification of the unix filing system. Software Engineering, IEEE Transactions, issue.102, pp.128-142, 1984.

G. Ntzik and P. Gardner, Reasoning about the posix file system: Local update and global pathnames, Proceedings of the 2015 ACM SIGPLAN International Conference on Object-Oriented Programming, Systems, Languages, and Applications, OOPSLA 2015, pp.201-220, 2015.

E. O. Patrick and . Neil, The escrow transactional method, Trans. on Database Systems, vol.11, issue.4, pp.405-430, 1986.

J. K. Ousterhout, H. Da-costa, D. Harrison, J. A. Kunze, M. Kupfer et al., A trace-driven analysis of the unix 4.2 bsd file system

C. H. Papadimitriou, The serializability of concurrent database updates, Journal of the ACM, vol.26, issue.4, pp.631-653, 1979.
DOI : 10.1145/322154.322158

K. Petersen, M. J. Spreitzer, D. B. Terry, M. M. Theimer, A. J. Demers et al., Flexible update propagation for weakly consistent replication Locus: A network transparent, high reliability distributed system, Symp. on Op. Sys. Principles (SOSP) Symp. on Op. Sys. Principles (SOSP), pp.288-301, 1981.

N. Ramsey and E. Csirmaz, An algebraic approach to file synchronization, 2001.
DOI : 10.1145/503229.503233
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.18.5774

D. Ratner, P. Reiher, and G. Popek, Roam: a scalable replication system for mobile computing, Proceedings. Tenth International Workshop on Database and Expert Systems Applications. DEXA 99, pp.96-104, 1999.
DOI : 10.1109/DEXA.1999.795151
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.74.952

P. Reiher, J. S. Heidemann, D. Ratner, G. Skinner, and G. J. Popek, Resolving file conflicts in the Ficus file system, Usenix Conf. Usenix, 1994.

C. John and . Reynolds, Separation logic: A logic for shared mutable data structures, Proceedings of the 17th Annual IEEE Symposium on Logic in Computer Science, LICS '02, pp.55-74, 2002.

R. Strohm, Oracle Database Concepts, 2011.

S. Roy, L. Kot, G. Bender, B. Ding, H. Hojjat et al., The Homeostasis Protocol, Proceedings of the 2015 ACM SIGMOD International Conference on Management of Data, SIGMOD '15, pp.1311-1326, 2015.
DOI : 10.1145/1706299.1706338

D. C. Siegel and . Steere, Coda: A highly available file system for a distributed workstation environment, IEEE Trans. on Computers, vol.39, issue.4, pp.447-459, 1990.

M. Shapiro, N. Preguiça, C. Baquero, and M. Zawirski, Conflict-Free Replicated Data Types, Int. Symp. on Stabilization, Safety, and Security of Distributed Systems (SSS), pp.386-400, 2011.
DOI : 10.1007/978-3-642-24550-3_29
URL : https://hal.archives-ouvertes.fr/hal-00932836

K. Sivaramakrishnan, G. Kaki, and S. Jagannathan, Declarative programming over eventually consistent data stores, PLDI, 2015.
DOI : 10.1145/2737924.2737981

Y. Sovran, R. Power, M. K. Aguilera, and J. Li, Transactional storage for geo-replicated systems, Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles, SOSP '11, pp.385-400, 2011.
DOI : 10.1145/2043556.2043592
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.221.2632

J. M. Spivey, The z notation: A reference manual, Engineering Complex Computer Systems 12th IEEE International Conference on, 1998.

V. Tao, M. Shapiro, and V. Rancurel, Merging semantics for conflict updates in geo-distributed file systems, Proceedings of the 8th ACM International Systems and Storage Conference on, SYSTOR '15, pp.10-11, 2015.
DOI : 10.1007/978-3-642-24550-3_29
URL : https://hal.archives-ouvertes.fr/hal-01248190

D. B. Terry, A. J. Demers, K. Petersen, M. J. Spreitzer, M. M. Theimer et al., Session guarantees for weakly consistent replicated data, Proceedings of 3rd International Conference on Parallel and Distributed Information Systems, pp.140-149, 1994.
DOI : 10.1109/PDIS.1994.331722
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.71.2269

D. B. Terry, V. Prabhakaran, R. Kotla, M. Balakrishnan, M. K. Aguilera et al., Consistency-based service level agreements for cloud storage, Proceedings of the Twenty-Fourth ACM Symposium on Operating Systems Principles, SOSP '13, 2013.
DOI : 10.1145/2517349.2522731
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.390.3165

D. B. Terry, M. M. Theimer, K. Petersen, A. J. Demers, M. J. Spreitzer et al., Managing update conflicts in Bayou, a weakly connected replicated storage system, Symp. on Op. Sys. Principles (SOSP), pp.172-182, 1995.

W. Vogels, File system usage in windows nt 4.0, Proceedings of the Seventeenth ACM Symposium on Operating Systems Principles, SOSP '99, pp.93-109, 1999.
DOI : 10.1145/346152.346177
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.114.8462

W. Vogels, Eventually Consistent, Queue, vol.6, issue.6, pp.14-19, 2008.
DOI : 10.1145/1466443.1466448

A. A. Wang, P. Reiher, R. Bagrodia, and G. H. Kuenning, Understanding the behavior of the conflict-rate metric in optimistic peer replication, Proceedings. 13th International Workshop on Database and Expert Systems Applications, pp.757-761, 2002.
DOI : 10.1109/DEXA.2002.1045989

M. I. Lali-wim and H. Hesselink, Formalizing a hierarchical file system, Formal Aspects of Computing, vol.24, issue.1, pp.27-44, 2010.

H. Yu and A. Vahdat, Building replicated internet services using tact: a toolkit for tunable availability and consistency tradeoffs In Advanced Issues of E-Commerce and Web-Based Information Systems, pp.75-84, 2000.