{"schemaVersion":"1.0","generatedFrom":"https://brightaifuture.com/discoveries/alphaproof-code-private-messages","record":{"id":"alphaproof-code-private-messages","headline":"AI helps check the code that keeps private messages private","canonicalUrl":"https://brightaifuture.com/discoveries/alphaproof-code-private-messages","datePublished":"2026-11-11","dateModified":"2026-11-11","sourcePublicationDate":"2026-11-10","author":null,"publisher":{"name":"Bright AI Future","url":"https://brightaifuture.com/"},"topics":["agents"],"summary":"Google DeepMind’s AlphaProof Code produced machine-checked proofs for parts of Signal’s cryptographic implementation. The promising step is making rigorous software checks easier to do, with people still deciding what must be proved.","evidenceState":"Emerging","keyFacts":[{"label":"AI’s role","value":"AI agents draft specifications under human review and generate proofs checked by Lean against approved statements."},{"label":"Documented result","value":"DeepMind reports machine-checked proofs of specified security properties for a compiled build using libsignal, with about 6.5 million lines of proof and roughly 26,000 lines of trusted specifications and processor semantics."},{"label":"Important limitation","value":"The result concerns specified properties of a particular AArch64 command-line build of libsignal v0.105.4’s one-to-one session code, not the complete Signal applications. Group messaging, multi-device state and side channels are outside its scope."}],"limitations":["The result concerns specified properties of a particular AArch64 command-line build of libsignal v0.105.4’s one-to-one session code, not the complete Signal applications. Group messaging, multi-device state and side channels are outside its scope.","The proofs depend on trusted specifications, processor and environment models, and cryptographic assumptions. The computational proof offers no quantum-adversary guarantee. A separate symbolic proof covers handshake secrecy if an attacker later breaks Diffie–Hellman key exchange, but not the added post-quantum ratchet’s recovery after compromise.","Bright has not rerun the proofs or independently audited their assumptions. Public artifacts are available for scrutiny; affordability, broader coverage and routine commercial use are not established."],"evidenceLinks":[{"title":"Google DeepMind · November 10, 2026 · primary technical report and public proof artifacts; scope and limitations in sections 5.1.6 and 5.2.5","url":"https://google-deepmind.github.io/code-verification/","type":"paper"},{"title":"Google DeepMind · November 10, 2026 · institutional announcement","url":"https://deepmind.google/blog/introducing-alphaproof-code/","type":"institution"},{"title":"Signal · Double Ratchet specification · background on messaging security design","url":"https://signal.org/docs/specifications/doubleratchet/","type":"institution"},{"title":"WIRED · November 10, 2026 · reporting on undisclosed costs and commercial plans, not independent proof replication","url":"https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol/","type":"report"}],"evidencePackUrl":"https://brightaifuture.com/evidence-pack/alphaproof-code-private-messages","embedUrl":"https://brightaifuture.com/embed/story/alphaproof-code-private-messages","attribution":{"credit":"Bright AI Future","requirements":["Link to the canonical Bright record.","Keep material limitations with the claim they qualify.","Link to the original evidence when repeating a substantive claim.","Do not describe a source check or organization-reported result as independent verification."],"sourceRights":"Linked source material, quotations, trademarks and media remain subject to their owners’ terms. No reuse right is granted for third-party media."}},"claim":{"humanProblem":"A private message can hold something ordinary and irreplaceable: a family conversation, a plan with a friend, a difficult question. Most of us cannot inspect the code carrying it. We depend on other people finding ways to check that the protection works.","priorConstraint":"Rigorous verification of real software has required substantial specialist work, limiting where it can be applied.","aiRole":"AI agents draft specifications under human review and generate proofs checked by Lean against approved statements.","documentedResult":"DeepMind reports machine-checked proofs of specified security properties for a compiled build using libsignal, with about 6.5 million lines of proof and roughly 26,000 lines of trusted specifications and processor semantics.","whyItMayMatter":"If this approach becomes affordable and repeatable, more software maintainers could check whether important protections hold in the implemented code. That wider benefit remains to be demonstrated.","unresolvedQuestions":["Can independent specialists reproduce the checks and validate the specifications and assumptions?","Can coverage expand to more application behavior and realistic deployment conditions?","What does verification cost, and how readily can proofs be maintained as software changes?"]},"evidenceAssessment":{"state":"Emerging","claimConfidence":"unassessed","reviewState":"approved","reviewMethod":"ai-assisted","reviewNote":"AI-assisted source report comparing the November 10 announcement with the public technical report, including stated proof scope and limitations, Signal design documentation and reporting about costs. No Bright proof rerun, independent security audit, interview or human editorial review is claimed. Original explanatory visual is a simplified workflow, not a performance result. An additional AI-assisted source and visual review was completed; scope and quantum-limit precision edits adopted.","lastSourceReview":"2026-11-11T12:07:18.168Z","independentVerification":"not-established-by-this-source-review"},"sources":[{"id":"source:alphaproof-code-private-messages:paper","title":"Google DeepMind · November 10, 2026 · primary technical report and public proof artifacts; scope and limitations in sections 5.1.6 and 5.2.5","type":"paper","url":"https://google-deepmind.github.io/code-verification/"},{"id":"source:alphaproof-code-private-messages:announcement","title":"Google DeepMind · November 10, 2026 · institutional announcement","type":"institution","url":"https://deepmind.google/blog/introducing-alphaproof-code/"},{"id":"source:alphaproof-code-private-messages:signal","title":"Signal · Double Ratchet specification · background on messaging security design","type":"institution","url":"https://signal.org/docs/specifications/doubleratchet/"},{"id":"source:alphaproof-code-private-messages:reporting","title":"WIRED · November 10, 2026 · reporting on undisclosed costs and commercial plans, not independent proof replication","type":"report","url":"https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol/"}],"revisions":[{"id":"alphaproof-code-private-messages-initial-2026-11-11","recordedAt":"2026-11-11T12:07:18.168Z","sourceIds":["source:alphaproof-code-private-messages:paper","source:alphaproof-code-private-messages:announcement","source:alphaproof-code-private-messages:signal","source:alphaproof-code-private-messages:reporting"],"summary":"Initial source report on AI-assisted verification of messaging protocol code, with exact implementation and proof-assumption limits."},{"id":"alphaproof-code-private-messages-review-method-2026-11-11","recordedAt":"2026-11-11T12:17:54.225Z","sourceIds":["source:alphaproof-code-private-messages:paper","source:alphaproof-code-private-messages:announcement","source:alphaproof-code-private-messages:signal","source:alphaproof-code-private-messages:reporting"],"summary":"Clarified that the additional source and visual review was AI-assisted; article, evidence scope, limitations and image are unchanged."}],"corrections":[]}