Sekura JS Explores Sharing Software Verification Proofs Without Exposing Source Code
Sekura JS is developing an approach that separates a software module's source code from its verification contract (SJV) and proof artifact (SJP), allowing developers to share evidence of formal verification without disclosing proprietary implementations. The SJV document specifies the properties a module claims to satisfy, while the SJP carries the mathematical evidence produced during verification. A third-party verifier can replay the stored SMT obligations using tools like Z3 or CVC5 to confirm their validity without ever seeing the underlying source code. However, the project acknowledges a key limitation: replaying an SJP can confirm that the mathematical proofs are valid, but cannot independently verify that those proofs were actually generated from the specific private codebase the developer claims. This creates an explicit trust boundary between the private source code and the proof artifacts exchanged between parties.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)
Log in to join the discussion and vote.
Log in