Formal specification and verification of a team formation protocol using TLA