Google DeepMind

AlphaProof Code

Research

Research framework DeepMind introduced on Nov. 10, 2026 for formal verification of software. The blog says Gemini Carbon agents generated over six million lines of Lean and that the Signal verification took four weeks. The paper says about 6.5 million lines of machine-checked Lean cover libsignal's PQXDH handshake and Triple Ratchet for forward secrecy, authentication, post-compromise security, and handshake secrecy. The code under proof is unmodified libsignal linked into a command-line harness and compiled with stock rustc to AArch64, with some cryptographic routines specified by contracts. It is not a proof of every installed Signal or Google Messages binary. DeepMind says two previously fixed bugs, reintroduced in an isolated copy, produced proofs that those binaries were insecure. No product price was stated.

Latest update Nov 11, 2026

01

Current status

Paper and blog dated Nov. 10, 2026. Proof artifacts are open-sourced. Not described as a customer product.

  1. DeepMind says AlphaProof Code verified Signal's compiled code

    On Nov. 10, Google DeepMind said AlphaProof Code used Gemini Carbon agents to produce machine-checked Lean proofs for compiled libsignal, the Signal protocol's reference implementation. The technical paper says the proofs are about 6.5 million lines and cover the PQXDH handshake and Triple Ratchet for forward secrecy, authentication, post-compromise security, and handshake secrecy. They apply to unmodified libsignal linked into a command-line harness and compiled with stock rustc to AArch64, with some cryptographic routines specified by contracts, not to every installed Signal app. DeepMind says two previously fixed bugs, when put back into an isolated copy, produced proofs that those binaries were insecure. The paper's first-proofs wording is the authors' claim.

    deepmind.google google-deepmind.github.io + Alphabet

03

More from Google DeepMind11

04

More in AI Labs