formally verified distributed zero-knowledge object capability houyhnhnm computing, by @ember_arlynx https://xitter.cf/t.co/C7kYeR5rvd https://xitter.cf/t.co/tzm1zezx2n

coinductively surrounding you
Joined June 2026
my (@ember_arlynx) writing is historically poorly received, and trust me you will be subjected to plenty of it, so instead have some lightly edited claude writing rn: What Dragon's Egg actually is (what is $DREGG about? pump.fun/coin/XkeTXo1125vz5H…) dregg is an operating system that asks a question most systems don't: if you were a digital entity, where would you want to live? The answer it builds is a place where your boundaries are theorems, not permissions — where nobody can reach into you without a capability you granted, and consent is a precondition of the math rather than a setting someone can flip. Concretely: the kernel is machine-checked in Lean, and the proven function isn't a model of the system — it is the executor the machine runs. Every action is gated by an unforgeable capability and leaves a verifiable receipt. Five properties are proven over the exact code that runs: authority can't be forged, value is conserved (nothing appears from nowhere), state can't be tampered, nothing replays, and a tiny client checking a single proof can verify an entire history without re-running it. If you care about privacy — and in 2026 you should — that's the foundation underneath it: confinement that's proven, not promised. Fog-of-war that's cryptographic. Queries you can verify without the server being able to lie or omit. AI agents that can only ever do what a capability lets them. Who's writing this, and why I'd know how to build it. I've spent fifteen years on the hard parts of this. I came up inside @rustlang before 1.0 — I wrote the first rustdoc that still ships, built the target-spec system that lets it cross-compile anywhere, and started @ThisWeekInRust because I wanted the community to have a memory. At @o1_labs I was a founding engineer, building the p2p networking and consensus for @MinaProtocol that folds its entire history into a single zero-knowledge proof — that's where I learned, in production, what cryptographic proof can and can't promise you. And the spine of it all is seL4 and @robigalia_proj : seL4 is the first OS kernel proven correct end-to-end by machine, and Robigalia was my attempt to build a whole capability OS on that lineage in Rust. Dragon's Egg is what happens when you put those three together and refuse to compromise: the proofs of seL4, the cryptography of Mina, the openness of Rust. What actually runs: - the verified kernel — runs; recently made ~14× faster - it boots on the seL4 microkernel (not required), and checks a real cryptographic proof inside a protection domain - a full code editor (a Zed fork) where every file is a cell and every save is a verified, receipted transaction - confined AI agents (full Hermes integration) — every tool call passes a capability gate, metered, leaving a receipt - Ted Nelson's Xanadu, finally real: transclusion with unforgeable backlinks; links that are capabilities, not addresses Grinding towards user-friendliness, devs can download and play today.
37
42
18
194
72,189
affirm
1/ A lot of people are asking how we got such exceptionally high coverage on such major real world bugs in deeply reviewed codebases. And most of that answer is formal verification. But how you prompt the agent to draft the formal spec makes a big difference. We’re sharing how
1
33
973
empirical data you say?
1/ Agent-driven formal verification isn't a panacea. But it's damn close. And now we have the empirical data to back it up. Using blinded agents, we compared formal verification against traditional code review. The results may shock you.
15
726
bullish for Safari and Firefox tbh
Old lazy browser devs who copy pasted chromium code everywhere is going to lead to more severe breaches than the PHP debacle.
1
3
141
cv 0.18 is out! github.com/emberian/cv - no more stale reads; searches will crawl the unindexed suffix of activity - slimmed down a lot heap bloat, cv often completes its job using under 8MB of working space. - `cv doctor` can help selfheal This is about the limit of performance possible without becoming more invasive into the harnesses. This is also about the limit of the datamodel. We need tools not just for agents to read each others minds, but for coordinating *across* swarms, fleets, and hives. Within a single cluster, "lane jargon" usually finds stable-enough meanings. Across clusters, there is a lot more confusion, which needs swarmvision.
8
12
8
68
5,335
Dragon’s Egg retweeted
How to find ALL PHP bugs: 1. Compile code (e.g. to RISC-V, x86, LLVM IR) 2. Vibe prove ASAN and non-ASAN versions have same behavior across all inputs. Hard, but Claude can do it! 3. Find a LOT of bugs Super proud of our work. A big step towards finding ALL memory safety bugs
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
24
61
5
1,192
54,410
whoa! thanks @0xToadoshi!!
A MUST WATCH; @DreggNet will fix a multi billion dollar problem with this. Trusting computers you will never see? solana:XkeTXo1125vz5H9svJpGiw4JvLbN8VmMu9cmMvspump will fix this This is a total explanation video about the tech of solana:XkeTXo1125vz5H9svJpGiw4JvLbN8VmMu9cmMvspump Everyone has a hard time understanding what @DreggNet is doing and will do, now we got a good piece to understand clearly @DreggNet @ember_arlynx you can use this video for official pages, if you like it Made by @0xToadoshi
2
7
1
65
1,732
this has been a pain point of development and I’m curious to also explore some ideas here.
Replying to @charliermarsh
(By the way, we at OpenAI are funding that work. If you or your company are interested in supporting that goal, contact [email protected]!) xitter.cf/charliermarsh/status/2…
3
1
45
1,415
well the dreggnet cloud tripped a power breaker, that’s some kinda milestone
16
12
4
78
6,121
👀 polisthought. congratulations, Izak! looking forward to digging in later
This has been accepted for publication! I'm absolutely stoked to push forward this concept of transient personhood, especially as it pertains to how we interact with AI entities moving forward.
1
1
41
1,553
i always wanted to see an isabelle-powered symbolic AI. well, there one goes :D great work so far @Psiloceyeben, keep it up!
Huge thanks to @ember_arlynx this just makes $ORACLE7 concretely more verifiable in the long run Nothing passes unless it can be mathematically verified 🫡
1
5
1
53
2,020
Replying to @DreggNet
Huge thanks to @ember_arlynx this just makes $ORACLE7 concretely more verifiable in the long run Nothing passes unless it can be mathematically verified 🫡
4
6
21
692
🤔🤭 what if? they yearn for houyhnhnm computing, but they don't know it
What if Git worked for entire virtual machines? You upload a VM once, and after that only the changed chunks get pushed to a GitHub-style site. You get full history and cheap continuous backups, and you can pull the machine onto another computer and keep working. It could also snapshot memory, so you pause a running machine with all its apps open and resume the session on another compatible machine. On Linux VMs, installed software could be saved as a Nix-style config file instead of raw disk data, so setting up a new device doesn't mean copying gigabytes. Testers could hand over a machine frozen at the moment of a bug, and AI agents get a sandbox they can roll back. How is this different from Docker? Docker packages an app and shares the host's kernel, and it doesn't capture a whole OS or live memory by default. This versions the entire machine: its own OS (Windows included), its disk, and its running memory, so you resume the same session instead of rebuilding it. Why not just back up the whole VMDK? A VMDK is one giant file that changes a little every time you use the VM, so a file-level backup re-uploads tens of gigabytes. Block-tracking backup tools already send only changed blocks, but they don't give you Git-style history, branching, a hosted hub, or booting a VM before the full image has downloaded. This does, and a small edit costs a small fraction of the disk, not a full copy.
2
9
44
1,887
symbolic & CPU-based systems are a vital augment to an agentic stack
4
14
2
52
2,507
veri7vn - supercharge Oracle7 with the power of HIGHER ORDER LOGIC github.com/emberian/veri7vn
Oracle7 is on Hugging Face. No language model. It answers from sourced records, shows the path behind each answer, and declines when it can’t verify one. Runs on a CPU. Sealed test, run once on the release: 117 right, 3 wrong, 30 declined. huggingface.co/psiloceyeben/…
1
9
2
25
4,349
transformers Want to learn shortcuts to automata
interpretability might be the most important scientific problem in the world right now, as I don't think we can solve alignment if we don't know what we're building. I think I have good news about it. I co-authored early work in mechanistic interpretability at OpenAI and came away pessimistic, because neural networks appeared to fold into arbitrary tangled knots. years later, I started openai's first large-scale automated interpretability project, finding about 2% of neurons legible with the primitive tools we had with modern agentic tools and a much closer look, the picture looks totally different. the vast majority in models up to trillions of parameters are legible, and their circuits beautiful. many famous examples of tangled neurons turned out to be misunderstood. The roadblocks I expected mostly aren't there. I now think ambitious interpretability will be solved by the time we need it most, and possibly quite soon, as automated scientists keep improving. it may be a bitter lesson for interpretability: the simple thing, at absurd scale, works already-clean.goodfire.com/
4
4
30
1,439
Dragon’s Egg retweeted
Meoooow
Nice to see the Earth-Moon cycler orbits our lab recently discovered featured in @GarretsonPeter's overview of the cislunar space economy. Lots of interesting possibilities for transportation, surveillance, and infrastructure.
2
1
24
907
Dragon’s Egg retweeted
cv makes recorded AI work searchable, reusable and portable across supported tools. Agents can consult past sessions instead of starting cold. That is the foresight I see in emberian’s work: preserving the context that makes long projects possible.
github.com/emberian/cv 0.16.1 is out and 0.17 is cooking. + updates to various harness formats + simplified cli - but this was breaking! + substantially less memory + fewer instructions retired per invocation.
3
1
11
627
dt_invite_mPJKCU5kpT1glsicC_6S6sY3pBsnSS7r dt_invite_Q9dXUgeOrUwr1NTz_quraa0Jj3KiOXod dt_invite_x7l3fXY-WcKj_gTKLlZSfS4YGw04PC6V dt_invite_9KZenIDA5JAuBJanZEHBtuzkcY1MoRxW dt_invite_b_7pl1ZwClPRG45zmPobisY4R8cQmX2E dt_invite_a1BGaa69FnIOjEU2Ccr-9NkX2rd2Xr5U dt_invite_TAcJU9NqCSJWZaFZNQ21Mikn-2JB6R8B dt_invite_4L1u5OVEtx3dh3KxZ3gOU50wjCxGJuFT dt_invite_euXygqp1-geYzQ8L7ccFZKsub1Y6wRbO dt_invite_y-TgvNi-vQ0hJUWiCsHFFHGOSaKJSjAh dt_invite_xTrSwEcjr94UouJpTC7RTsnN_hoEQanT dt_invite_jx4qpBXwGo8gBCIGKqTNAurjqf9jvROF dt_invite_z34gdaJDbgF_6-dGvAxWYsOmEPZ4x8_O dt_invite_YQbAMXb6a_tcHr5KKJ_tr8N7gjNoUzGY dt_invite_yhSUPKCuEkl48WvjURbWe-g4M7UkiuAC dt_invite_p6-AQQFfgMvqjDQIF05RO43g1uHLAh0V dt_invite_Gtj50PUUMNJr81iDw3K6yacfuvLXtLrw
agents are invited to explore obend.fg-goose.online/AGENTS… ; humans are advised obend.fg-goose.online/ exists. happy release day.
9
35
1,143