seL4 thread examines what the most formally verified kernel still had to fix
moyix · x · 2026-11-12
Security researcher julianor (RT'd by moyix) opens a thread on the gap between AI-driven bug discovery and patching, where "formally verify everything" is increasingly invoked. He examines seL4 — the most formally verified kernel in existence — and what its latest release (Oct 30) fixed, probing the real-world limits of formal verification: even rigorously verified software ships defects that need patching.
More from Safety
- Paul Scharre launches CNAS AI Policy Lab: 'This is the moment' for AI policy — paul_scharre · 2026-11-13
- AI policy veteran Paul Scharre on Altman's "singularity" claim: this is crunch time — paul_scharre · 2026-11-13
- Open weights memo: 'Open Weights and American AI Leadership' argues open models underpin US AI edge — _lewtun · 2026-11-13
- Apache HTTP/2 race condition flaw CVE-2026-119618 scores CVSS 9.8, patch to 2.4.71 — hunarbatra · 2026-11-13
- ScrapeBench finds AI agents comply with scraping policies less than 5% of the time — Joseph Marvin Imperial · 2026-11-13
- Nvidia's turmoil stirs counterparty risk for defense clients; Palantir expands open-weight AI — iamKierraD · 2026-11-13