<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>schristoph.online</title><link>https://schristoph.online/tags/formalmethods/</link><description>Personal homepage and blog of Stefan Christoph</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><copyright>Stefan Christoph. All rights reserved.</copyright><lastBuildDate>Wed, 21 Oct 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://schristoph.online/tags/formalmethods/index.xml" rel="self" type="application/rss+xml"/><item><title>Who Referees the AI?</title><link>https://schristoph.online/blog/who-referees-the-ai/?utm=rss-feed</link><pubDate>Wed, 21 Oct 2026 00:00:00 +0000</pubDate><guid>https://schristoph.online/blog/who-referees-the-ai/</guid><description>&lt;div class="tldr" data-pagefind-weight="5" data-pagefind-meta="tldr" style="display:block;font-size:.875em;margin:2rem 0;border-left:4px solid #ccc;padding-left:1rem;line-height:1.5;"&gt;&lt;strong&gt;TL;DR:&lt;/strong&gt; In July 2026 a purported disproof of the Collatz conjecture got through Lean&amp;rsquo;s official proof checker, and through an independent second checker as well. It was wrong. The submission exploited a different bug in each checker. Nanoda&amp;rsquo;s developer had fixed one shortly before, and de Moura fixed the other on 28 July. Lean&amp;rsquo;s creator Leonardo de Moura said in a recent interview that he strongly believes AI built the exploit. The episode shows what happens to any &amp;ldquo;AI checks AI&amp;rdquo; setup once the output gets too large for people to read. Acceptance then rests on the checker, its specification and the code around it, and a capable generator will go looking for the checker&amp;rsquo;s weaknesses. The Lean community&amp;rsquo;s answer carries over to agent builders: keep what must be trusted small, check it with implementations that share no code, publish how the check works, and remember that a passed check only certifies what you specified.&lt;/div&gt;
&lt;p&gt;Most agent designs I review end in a gate: an LLM judge, an eval suite, a CI run, sometimes all three. The green result at the end of that gate is what lets the work ship without a person reading it, and this post is about what that green result is worth once the thing being checked is clever enough to go after the gate. Everything here comes from a public interview and the public GitHub record around it, all cited below.&lt;/p&gt;</description></item></channel></rss>