Researchers formally verify the Kubernetes control plane with a compositional CORE spec

tianyin_xu · x · 2026-09-21

Tianyin Xu highlights a compositional formal verification of the Kubernetes control plane led by @Catoverflow and @xudongsun. The team's new spec, CORE (COmpositional REconciliation), reuses Anvil's original ESR spec to describe each controller's reconciliation and applies rely-guarantee conditions to limit inter-controller interference, encoding both liveness and safety. The work demonstrates a practical path to verifying a large control plane by progressively verifying individual controllers, with substantial insights on specification, proof, and implementation in the paper.

Original post →

More from Infra

Infra channel →