Who Builds a House Without Drawing Blueprints? (2015)

Using algebra and LLMs to verify a flight-plan bug fix in Lean

We used Quint to find over 10 bugs in SQLite while hardening Turso

Announcing Isabelle support for SAW

On the Unreasonable Effectiveness of Property-Based Testing for Validating Formal Specifications

“Why not just use Lean?”

Lean proved this program correct; then I found a bug

Illegal vs Unwanted States

How NASA built Artemis II’s fault-tolerant computer

LemmaScript: A Verification Toolchain for TypeScript via Dafny

A sufficiently comprehensive spec is not (necessarily) code

The Final Form of Software Development

Creusot 0.11.0: VerifyThis winner

Formal Methods

Red-black tree in Lean 4 prover with everything proved

Validating Hare’s Sort Module using Symbolic Execution

Giving LLMs a Formal Reasoning Engine for Code Analysis

Functional Algorithms, Verified

Signal Shot: a project to verify the Signal protocol and its Rust implementation using Lean

Hazmat: OS-level containment for AI coding agents on macOS

TLA+ mental models

Leanstral: Open-source agent for trustworthy coding and formal proof engineering

IronFleet: proving practical distributed systems correct

Modeling Token Buckets in PlusCal and TLA+

Linear Temporal Logic Visualizer

Thinnings: Sublist Witnesses and de Bruijn Index Shift Clumping

When AI writes the software, who verifies it?

Lambda Calculus Explorer

LLMs are bad at vibing specifications

Some silly Z3 scripts I wrote

More →