A Liveness Example in TLA+