Why repo-level verification: single-function benchmarks miss real software

dawnsongtweets · x · 2026-08-23

Motivation for Vero: agents are impressive at writing code, but can we trust it at real software scale? Existing benchmarks target single functions or proof generation on a fixed implementation, whereas real verified software (OS kernels, crypto protocols, distributed systems) lives in multi-module repositories where code, specs, and proofs are deeply interdependent—a single refactor can invalidate proofs across the codebase. No prior benchmark evaluates joint code-and-proof generation and formal verification at this scale.

Related event: Dawn Song's Team Releases Vero, First Repo-Level Formal Verification Benchmark(8 posts)→

Original post →

More from Research

Research channel →