A CloudGoat walkthrough by VirajMathpati demonstrates a privilege escalation chain that bypasses permission-based scanners, allowing an IAM user with zero Secrets Manager permissions to retrieve a sec…
Google's Common Expression Language team released a formal-verification framework for CEL on August 18, using the Z3 theorem prover to check satisfiability, validity, equivalence and policy invariants…
A developer argues that cloud security tools miss the most dangerous attack paths because they check individual resources rather than the relationships between them. The post identifies intent-indepen…
Spur solver, a Z3-backed model-finder for SPUR coding agents, enables agents to start from solved values instead of invented parameters by returning sat with a concrete model or unsat/unknown/timeout.…
A developer built a static security verification plugin for OpenCode that intercepts AI tool calls and runs formal verification via a Python daemon using the Guardians repository, blocking unsafe oper…
Kristopher Micinski and Claude Code have created Puffin, a minimal Scheme/ML-like functional programming language with a self-hosting compiler, gradual types, and three backends (arm64, x86-64, byteco…
EZSMTV3, an extensible SMT-based Constraint Answer Set Programming (CASP) framework, has been released with a more expressive input language, support for optimization via weak constraints, and streaml…
Developer Dan published a critical review of Overplane, an AI coding harness that uses LLMs and SMT solvers to generate verified code from Markdown specs. Dan argues the tool is redundant for experien…
Claude generated Z3/Python code to solve a chess puzzle placing all pieces on a 6x5 board with bishops on opposite colors and no attacks. The solver found 192 raw solutions, deduplicated to 24 unique …
CPMpy, a constraint programming and modeling library for Python based on NumPy, has been released. It provides solver-agnostic support for CP, ILP, SMT, PB, and SAT solvers, with decision variables as…
Researchers have developed Chiasmus, an MCP server that gives large language models access to formal reasoning engines for code analysis, combining Z3 constraint solving and Tau Prolog logic programmi…