News for hackers. Stuff that matters.
Re:AlphaProof Code by fooker on Tuesday November 10, 2026 @11:05AM (#50442283)
You'd just move from bugs in code to bugs in the spec.

Real software needs mind blowingly complex specifications and while it's now fairly easy to get an AI generated proof that your code follows the spec, there's not much to help you with bugs in the spec.

AI will happily change the spec for you so the code verifies though, but that doesn't solve the trust issue.

Truly a trusting trust scenario.

Re:AlphaProof Code by jwpapi on Tuesday November 10, 2026 @05:44PM (#50447362)
I have recenctly tried to move my codebase more to spec driven development, but I aborted it. For my use case it felt wrong. It just creates drift and more prose explaining what I need.

I’m not saying I’m right, but I want to understand. What’s the benefits of raw specs with AI, when AI can read the source of truth and explain to you?

Re:AlphaProof Code by fooker on Tuesday November 10, 2026 @09:31PM (#50449117)
The thesis is that you can come up with a tight spec that defines what correctness means for you. Then the AI writes lean proofs that your code follows this spec.

In practice, for real systems, this much moves source of truth, as you have pointed out.

However, there is a clear 'compactness' advantage for specs.

Specs can either define the operational (what it does) or the denotational semantics (what it is) for a system, while the code can only be operational. Some things are just easier and better defined in denotational semantics.

Re:AlphaProof Code by guenthert on Wednesday November 11, 2026 @04:16AM (#50451238)
> it's now fairly easy to get an AI generated proof that your code follows the spec

It's my understanding that automatic tools were able for a while already to verify whether a given system (code or otherwise) adheres to a given formal specification (at one point after the Pentium bug debacle AMD had its FPU proven, there are variants of the L4 microkernel which were proven, etc.).

The (great) challenge remained to create a formal specification from something humans can write and understand. Isn't that were LLMs come in? And isn't that were the current trust gap remains?