Field noteOct 23, 20261 min read1 source

Anthropic Frontier Red Team shows Claude can formally verify OSS-Fuzz libraries at scale

In one minute

Anthropic's Frontier Red Team and Theorem reported that Claude generated formal, machine-checkable proofs for 239 OSS-Fuzz entry points across 123 open-source software libraries.

What changed: Same event as New on our Frontier Red Team blog: using Claude to formally verify software at large scale.

The work targets compiled RISC-V binaries and turns existing fuzz tests into specifications that the corresponding program does not crash.

The reported proofs cover inputs below 64 MB and show normal exits without memory-safety errors or failed assertions for modeled Linux responses and memory layouts. Anthropic says the proof corpus totals roughly 180 million lines, and that the process found bugs that had survived extensive fuzzing. It is publishing a subset of the proofs plus RISC-V and OS semantics.

Theorem is offering the pipeline for other open-source projects and publishing a Claude skill intended to help developers begin verification. The source does not establish that the libraries are free of all bugs or vulnerabilities: the claims are limited to the stated properties, inputs, architecture, operating-system model, and assumptions, including single-threaded static binaries and a fixed memory budget.

Evidence / sources

  1. 1anthropic.com/research/formal-verification
All Field Notes

Next reads

Read next

Open the graph
  1. 01topicAnthropicExplore the anthropic topic hub.
  2. 02topicClaudeExplore the claude topic hub.
  3. 03archiveField NotesOpen the latest editorial analysis.
  4. 04source ledgerSource LedgerInspect the public source evidence graph.
Who read this page?Machine requests, hidden until opened

Loading the privacy-safe route aggregate...

Open the JSON contract