AeneasVerif / aeneas
A verification toolchain for Rust programs
AeneasVerif / aeneas
creusot-rs / creusot
Creusot helps you prove your Rust code is correct.
quint-co / quint
An executable specification language with delightful tooling based on the temporal logic of actions (TLA)
prusti / prusti
A static verifier for Rust, based on the Viper verification infrastructure.
CakeML / cakeml
CakeML: A Verified Implementation of ML
formal-land / rocq-of-rust
Formal verification tool for Rust: check 100% of execution cases of your programs to make safer applications.
fabio-rovai / open-ontologies
Plan, apply and roll back changes to a production ontology, with a blast radius report and a proof an auditor can re-check.
h5i-dev / h5i
Unified Rust framework for building, verifying, and testing web apps. Kernel-based architecture for Lean 4 verification and GPU acceleration. Built-in red-teaming tools for automated vulnerability detection.
FloatingPragma / observer-patch-holography
Observer Patch Holography: finite observer consensus, machine-checked mathematics and reproducible models for reconstructing physical structure.
emiliaprotocol / emilia-protocol
Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open protocol keeps evidence verifiable.
PrincetonUniversity / VST
Verified Software Toolchain
morluto / jacobian
Composable mathematics tools for agents
schildep / verified-3d-mesh-intersection
Formally verified 3D mesh intersection - trust 93 lines of spec, not 1000+ lines of AI-written code
Sega757 / Chronos-V3-the-Architecture-of-Conjunctive-Transparency-C-T-
Bicameral deterministic AI runtime: Zero-hallucination System 1/2 reasoning engine with cryptographic audit trails (RFC 8785, Ed25519) and PoSP consensus arbitration.
liujianyu20021122 / RTL-ASS
Codex-first, vendor-neutral RTL coding and verification skill using open-source tools
BasisResearch / ship-your-interpreter
Lean 4 + the Sail-generated RISC-V ISA model prove, CompCert-style, that an inductive WHILE semantics abstracts a real interpreter binary — zero sorries, zero axioms
sysprog21 / frama-c-mcp
MCP server that gives AI agents Frama-C: EVA, WP, and sandboxed ACSL iteration
ColinBundschu / mass-gap
The mass gap over the compact simple groups
asterinas / KVerus
KVerus: Scalable and Resilient Formal Verification for Rust Code
Swapnil-jain / integer-mult-kappa
Integer multiplication below n log n: a conditional witness kappa = 6685733/10^10 (> 2^-11) for T(n) = O(n (log n)^(1-kappa)) in the multitape model, building on OpenAI's problem and Colkitt's integer-mult-bounds: certificates, independent replays, Lean 4 checks