A login that refuses everyone passes formal verification — and is still useless

krishnan · x · 2026-11-10

Part 1 of krishnan's thread opens with a paradox of formal verification: a login that refuses everyone perfectly keeps the promise "you only get a token with the right password" — and is useless. A proof can be flawless and still guard half the requirement, motivating Microsoft Research's PDD Kit approach of clarifying intent before writing code.

Original post →

More from coding & agent

coding & agent channel →