athanorai
KAIROS · PROOF ARENA

The arena needs a little more room.

This preview is tuned for a desktop or laptop. Mobile support is coming after the team review.

Open this link on a larger screen to play the full guided demo.

Return to Kairos
athanorai · PROOF ARENA
a playable intro to formal verification for AItalk to us

athanorai
presents
K A I R O S
play the 90-second demo
THE PROMISES

A queue with 4 slots. Two promises keep it honest.

Get full wrong by one clock tick and data is destroyed, silently. This bug class has shipped in real silicon.

the block under test · 4-slot fetch queue
fullempty
candidate builds · 3choose one
recorded counterexample · full signal over 5 cycles
actual promised full 1 0 1 2 3 4 5
REFUTED
* * * PROOF RECEIPT * * *
run demo_fetch_fifo_01 · 2026-06 · yosys 0.38 + EBMC
REFUTED
verdict✕ refuted
promisefull rises the cycle the 4th slot fills
counterexample5 cycles · push×5 · full late by one
trace✕
scopethis block, all sequences, all cycles
assumptionsnamed · see full certificate
assumptions · full-proof (under assumed: inv_count_sync, inv_state_sync)
rung · counterexample · witness recorded, replayable
non-claims · nothing about timing, power, or blocks outside fifo.sv
sha256 f3a1…c9 · replayable
* * * IN PLAIN ENGLISH * * *
the same receipt, without the jargon

We took a real block from a RISC-V processor and let the AI make it a little smaller.

Then a proof engine checked that the new version behaves exactly like the old one. Not a million test cases. Every possible case, forever.

Here one case broke, a 5-step sequence that silently corrupts data. So this change is rejected, and the exact steps are recorded on the other side.

The receipt records which tools ruled, and the one command to re-run the whole check yourself.

If every case had passed, this page would say proved. We never round “probably” up to “proved.”

sha256 f3a1…c9 · replayable

the testssampled 10,000 cyclespassed ✓the mathchecked every sequencerefuted ✕Smaller pointer and Simpler data path both ✓ proved. Next, see the same block in a real run.

guided replay · illustrative run data
01propose 02measure 03check + learn 04receipt
failure memory
✓ PROVED
replay 00.0s ticks open evidence
00/08READYAI can search freely. Only checked work moves forward.
recorded replay · configuration 101
1234
press run. the recorded replay for this exact configuration plays back.
REFUTED
kairos certificate · configuration 101
verdict
promisethe car never moves until both doors are fully closed
replay
build a configurationflip any rule, then run the checker

the opening preset is deliberately unsafe · the verdict applies to configuration 101 as a whole · all 8 configurations have recorded verdicts

more arenas · same checker, same honesty

the invitation

we're building toward a world where AI systems and the tools they create come with stronger, checkable guarantees.

work with us to explore what formal verification could do for you or your agents, especially when AI touches something that matters.

start the conversation
contact@athanorl.com
open email
NEXT