How we read the signal

Analysis frame

Evidence level

Primary-source evidence

Analytical lens

Separating proof construction from proof checking while preserving the assumptions that connect a theorem to deployed software.

Affected groups
  • Open-source maintainers and software assurance teams
  • Organizations depending on libraries whose deployment conditions may differ from a proved configuration
What remains unknown
  • AIImpactLab has not independently executed the published proofs or audited the trusted formal models.
  • Published proof coverage is a subset of the company-reported research and does not establish all-system security.
Second-order effects to watch
  • Cheaper proof construction could make precise assurance available for more software components.
  • A proof label detached from its assumptions could encourage misplaced confidence after code or deployment conditions change.
Primary trail

Go to the source

Read the evidence behind this analysis. External links open in a new tab.

Anthropic — formal software verification research Theorem — public OSS Verify proofs and scope Theorem — Rocq Linux process semantics and assumptions