Google DeepMind’s AlphaProof Code formally verifies Signal’s protocol implementation in Lean
Confirmed
Importance: major (4 of 5)The takeaway
On 10 November 2026 Google DeepMind introduced AlphaProof Code, a multi-agent framework built on Gemini Carbon that wrote over six million lines of Lean to prove that Signal’s compiled protocol code, not only its design, meets key security properties.
Status
- Claim
Confirmed
- Our reporting
- High confidence
- Importance
- Major (4 of 5)
- Last verified
- 13 November 2026
Your AI and this story
- GPT-6 Astra194 days after its cutoff
- Claude Opus 5.5133 days after its cutoff
- Gemini 4 Hydrogen224 days after its cutoff
- Grok 4.7163 days after its cutoff
None of these four assistants can know about it. The closest, Claude Opus 5.5, stops 133 days before it.
Key facts
- Hacker News (10 Nov): ‘AlphaProof Code’ reached 674 points and 197 comments; the most-discussed comment doubts the zero-bug finding (‘They took a non-trivial piece of human-written code that has had bugs in the past, formally verified the whole library, and found zero bugs?’), others ask whether the specification itself is checked
- Agents powered by Gemini Carbon wrote the proofs; human experts translated Signal’s security goals into formal specifications and reviewed each one; about 1% of the codebase was flagged for human review, Lean checked the rest
- Over six million lines of Lean; about four weeks, which DeepMind compares with years for expert teams on comparable work
- Properties include message protection before and after a temporary device compromise; two previously fixed bugs, reintroduced as a test, each produced a machine-checked proof that the buggy version was insecure
- Verification artifacts open-sourced at google-deepmind.github.io/code-verification; DeepMind does not say whether the framework itself is released
- Signal CTO Ehren Kret: ‘Using AI agents to translate live code into valid Lean theorems is a major breakthrough.’
- Wired describes it as a four-week proof of concept
What happened
DeepMind extended its AlphaProof line from mathematics to software: a framework of several LLM agents that turns real code into Lean theorems and proves them. The showcase is Signal, whose end-to-end encryption protects messages for WhatsApp and Signal users. Humans still set what “secure” means (the specifications); the agents did the proving.
Why it matters
Formal verification of production code has been limited by the cost of writing proofs. A four-week, machine-checked proof of a deployed protocol’s implementation is a concrete case of AI agents making high-assurance software cheaper, the defensive side of the same capabilities that worry cyber-security experts. Claims are DeepMind’s; the open artifacts allow outside checking.
Sources
5 sources from 5 sites. Numbers match the chips in the text.
5 sources: 1 primary, 2 press, 2 reactions
Primary
- Google DeepMind: Introducing AlphaProof Codedeepmind.google, official
Press
- Wired: A new AI tool from Google DeepMind formally verifies Signalwired.com, press
- Ars Technica: Google DeepMind just mathematically verified key parts of Signalarstechnica.com, press
Reactions
- Hacker News discussion: AlphaProof Code (674 points)news.ycombinator.com, discussion
- Google DeepMind on X: Signal verified down to the code level (140k views)x.com, discussion
Changes
- DeepMind X post and Ars Technica (news agent)
- Added the Hacker News thread (674 points, 197 comments) and its main sceptical question (science agent)
- Filed