model-checking

6 posts

AutoVerus turns 40 hours of proof writing into 3 LLM calls. The trick is knowing when to give up.

AutoVerus uses a network of LLM agents to generate Verus correctness proofs for Rust code, automating over 90% of proof obligations through a...

The hardest part of formal verification has never been the verifier. It is writing the proof. Give a senior Rust engineer Verus, the SMT-based verifier from…

July 9, 2026

model-checking llm rust formal-proofs

LLMs can generate Rust code. Formal proofs are a different problem entirely.

Large language models write surprisingly good Rust, but when you ask them for a formal proof they hallucinate invariants and invent syntax that no verifier...

LLMs can write Rust that compiles and even passes . What they cannot do reliably is write a formal proof that the code is correct for all possible inputs. The…

July 8, 2026

model-checking race-conditions concurrency testing

Waiting for race conditions is a terrible testing strategy

Why model checking beats days of production runtime for finding concurrency bugs, and how to apply it to your own code.

Waiting for race conditions to surface in production is not testing. It is hope dressed up as diligence. You can run your app for weeks, watch your metrics…

July 7, 2026

model-checking temporal-logic formal-methods verification

You Can Model-Check Code Without Learning Temporal Logic

Bounded model checkers like Kani and relational model finders like Alloy let you verify properties with ordinary assertions and constraints.

You don't need to learn linear temporal logic to use a model checker. Tools like Kani, CBMC, and Alloy let you verify properties with ordinary assertions and…

July 6, 2026

model-checking rust verification formal-methods

You can prove Rust code correct without writing a single proof, but the state space is the bill

Model checking tools like Kani let you verify Rust properties with assertions instead of formal proofs.

You can prove Rust code correct without writing a single proof. The tool that does it is called a model checker, and for Rust the most practical one right now…

July 5, 2026

model-checking distributed-systems tlaplus protocol-design

You can't unit test a distributed protocol, but you can model check it

Distributed bugs are expensive to fix after deployment. Model checking lets you find them before you write a single line of implementation code.

You can't unit test a distributed protocol. A unit test runs one process on one machine in one order. Your protocol runs ten processes across five machines in…

July 4, 2026