ezyang: fancier specification languages quietly grow your trusted computing base

ezyang · x · 2026-11-09

ezyang warns that even in "nice" specification languages, the temptation to add features or generate specs via trusted elaboration/metaprogramming expands the TCB and the risk of spec bugs. He cites C compilers' UB behavior — after a condition, UB lets the compiler assume the condition is always false — so you'd better prove your spec has no UB.

Related event: Anthropic's assembly-level formal verification with Claude draws ezyang's TCB questions(6 posts)→

Original post →

More from coding & agent

coding & agent channel →