AlphaProof Code Verifies Signal’s Machine Code

This is a meaningful attack on the dangerous gap between security specifications and deployed binaries, but it is not proof that the entire Signal app is unhackable.

• –Human-reviewed specifications guided autonomous agents while Lean mechanically checked every proof.
• –The scope covers one-to-one sessions in libsignal, not Signal’s full applications, group messaging, key generation, or side-channel behavior.
• –DeepMind reports completing work in four weeks and correctly identifying two reintroduced historical bugs as insecure.
• –Open-sourced artifacts could eventually bring machine-checked security proofs into AI coding agents and CI pipelines.
• –The main bottlenecks remain specification quality, trusted cryptographic assumptions, proof cost, and translating results across builds and platforms.