Reusing your programming language as a spec language pulls compilation into your TCB

ezyang · x · 2026-11-09

ezyang notes that if your language has a formal semantics, you can skip a dedicated spec language and state properties as e.g. "fuzz test programs that must not crash" (as in Anthropic's work). But the trade-off: spec languages want a small TCB, and relying on low-level semantics of compiled output puts correct compilation of your spec inside the TCB.

Related event: Anthropic's assembly-level formal verification with Claude draws ezyang's TCB questions(6 posts)→

Original post →

More from coding & agent

coding & agent channel →