Claude Proves Security Across 123 Libraries
Anthropic and Theorem used Claude to generate Rocq-checked, machine-verifiable no-crash proofs for 239 entry points across 123 OSS-Fuzz libraries, operating on compiled RISC-V binaries. The process also uncovered bugs that had survived trillions of fuzzing runs. [Anthropic research](https://www.anthropic.com/research/formal-verification)
This is a major shift from AI-assisted testing toward AI-assisted guarantees, though the proofs remain bounded by their assumptions and coverage.
- –Formal verification reached production-scale open-source code rather than toy examples
- –Claude found edge-case bugs involving large, unusual inputs that fuzzers were unlikely to explore
- –Proofs cover selected entry points, input limits, architectures, operating-system models, and single-threaded execution
- –The workflow suggests developers may eventually generate proofs alongside tests and patches
- –The biggest bottleneck may shift from writing proofs to defining useful, complete specifications
DISCOVERED
1h ago
2026-10-24
PUBLISHED
1h ago
2026-10-24
RELEVANCE
AUTHOR
AI Revolution