Loading video...

Video Failed to Load

Go Home

“It's important to avoid over-claiming about how much [formal verification] could solve our problems.” Zac Hatfield-Dodds explains why we need to balance verification methods with practical safety work.

870,853 views • 1 year ago •via X (Twitter)

4 Comments

FAR.AI's profile picture
FAR.AI1 year ago

Follow us for AI safety insights And watch the full video

Joe Dakwa's profile picture
Joe Dakwa1 year ago

🚨 Launching a blockchain project? 🚀 Don’t risk exploits from blackhats due to unaudited smart contracts. 🔐 Get affordable, High-Quality Smart Contract Audits trusted by top projects like Coinbase & Optimism. 👉 Book a FREE consultation

Agus 🔎 🔸's profile picture
Agus 🔎 🔸1 year ago

@dodds_zac @Gato_el_simon, for balance, since I had sent you the safeguarding AI proposal

Jack Wheeler's profile picture
Jack Wheeler1 year ago

@dodds_zac This is of course not an issue in most applications but the moment you deploy your “models” in safety critical systems, you need formal verification

Related Videos

There’s a popular theory that AI will finally make formal verification mainstream because mathematical proof of correctness will be needed when machines write most or all of the code. But will this happen? Hillel Wayne is one of the best people to answer. Timestamps: 00:00 Intro 04:32 The Crossover Project 11:37 What software engineering does better 15:30 What traditional engineering does better 18:17 Formal methods 29:32 TLA+: what it is and demo 36:58 TLA+ at Amazon 38:10 Ways distributed systems break 41:03 Formal methods and systems thinking 46:20 The value of learning math 50:23 What TLA+ is good for and isn’t 52:50 Alloy: a declarative language for software modeling 58:53 Other formal methods tools 1:01:24 Property-based testing 1:05:31 AI and the need for formal verification 1:12:29 Logic for programmers 1:14:35 Hillel’s 2025 prediction on AI’s impact 1:21:30 Book recommendation Brought to you by: • Antithesis – verify your system’s correctness without human review or traditional integration tests – and avoid bugs or outages. • turbopuffer – a vector and full-text search engine built on object storage. It’s fast, cheap, and extremely scalable. • WorkOS – everything you need to make your app enterprise ready. Two things I found especially interesting, talking with Hillel: 1. Amazon used TLA+ to find a bug almost impossible to locate without formal methods. In the paper How AWS uses formal methods, the AWS team shared that they’d found a complicated bug for which the shortest error trace to exhibit was 35 steps (!!). The bug passed unnoticed through extensive design review, code reviews, and testing. AWS concluded they wouldn’t have uncovered it if they’d stuck to conventional testing approaches. 2. Why not use formal verification for everything, then? It’s because specs in the real world are a nightmare to write. Even a simple problem like “find the file in a directory that has the most lines” gets complicated when modeled with formal methods. We would have to answer questions like: ‘do we look at ASCII or UTF-8 new line characters, what about unreadable files, and Symlinks?’ Without formal methods, we can write a simple verification that is right in 99%+ of cases. Formal methods require a lot of extra effort for the less than 1% of exotic use cases!

Gergely Orosz

34,215 views • 12 days ago