Compiler UB gotchas mean your spec itself needs to be proven UB-free

ezyang · x · 2026-11-09

Even when reusing a programming language as the spec language, C compilers' famous "non-bug" behavior bites: UB after a condition lets the compiler assume the condition must always be false. ezyang's conclusion: better prove your spec has no UB, or low-level compilation semantics can silently undermine the verification result.

Related event: Anthropic's assembly-level formal verification with Claude draws ezyang's TCB questions(6 posts)→

Original post →

More from coding & agent

coding & agent channel →