Yes that's why it would be something like a Gödel machine[0]. Ignore everything it can't prove is not malicious (won't halt, runs too long, takes too many resources, etc.).

[0]: https://en.wikipedia.org/wiki/G%C3%B6del_machine