● Proof — Continuous Correctness Audit
Green builds aren’t proof. Evidence is.
Proof runs a continuous correctness audit: your promises, formalized; your code, held to them; every finding signed by name.
Scroll
Every growing product tells the same story.
Edge cases accumulate. Contracts drift. Regressions come back wearing new commit hashes. Then AI multiplied the code — faster than anyone can vouch for it.
The industry built instruments for speed. Nobody calibrated one for truth. The people shipping the code say so themselves:
Security firms audit whether your software can be broken into. We audit whether it works.
Same rigor. Different question. The instrument is pointed at correctness: what your software promises, and whether the code keeps the promise — today, and on every commit after.
One command. One reading. No interpretation required.
The audit is an instrument, not an opinion. Re-run it and the reading holds. One blocking finding, and the gate says no — to us, to you, to the release.
Borrowed from industries where software is not allowed to fail.
None of this instrumentation is new. It has flown. We adapted it for teams that ship every day, not once a decade.
Requirements that compute
Written in FRETish, NASA’s structured requirements language
for flight software — English a machine can check, not prose a
reviewer skims.
Formal verification
The Kind2 model checker and the Z3 theorem prover interrogate the
requirement set itself: realizable, consistent, non-vacuous —
before a single test runs.
Avionics-grade coverage
MC/DC — the coverage criterion certification demands for the
software that flies aircraft — applied to every decision in the
audited scope.
An instrument is only trustworthy if you publish its error bars.
We audited jsonparser, a widely used Go JSON library. The instrument did its work — and then it missed one, and we published that too.
A silent data-loss bug in Set() escaped the audit — with 100% MC/DC coverage on the books. The postmortem is public: what the instrument measured, why the reading was clean, and what we recalibrated so that class of miss can’t recur.
An audit firm that only shows you its wins is asking for faith.