I have written the second iteration of the TLA+ specification which now includes:
The AddPartitionsToTxn request/response.
Transaction coordinator (TC) elections so that leadership of a transaction log partition can now move between brokers.
Producer fencing and some of the abort transaction logic.