TLAPS-Bench author clarifies: passing formal verification doesn't mean bug-free implementations

moarbugs · x · 2026-11-05

In a thread about TLAPS-Bench, the author clarifies that the benchmark only validates properties at the specification level: TLA/TLA+ is not about system implementations, so even if agents can prove safety/liveness properties via TLAPS-Bench, that does not guarantee the systems are bug-free. He admits "abusing" TLA+ to describe implementations in Specula, noting the authentic flow is to get the spec right first, then produce code — which is itself nontrivial. The questioner suggests clarifying this in the paper/README, citing widespread "snake oil" around formal methods.

Related event: TLAPS-Bench Author Clarifies: Provable Specs Don't Mean Bug-Free Implementations(3 posts)→

Original post →

More from Research

Research channel →