A software-modeling language and analyzer used to check an authorization design with Codex.
Source discussion: LLMs are making formal software verification feasible at a much larger scale
“Along these lines, we used Codex to collaboratively build an alloy model for verifying the authorization model of GoodMem. After building the model, we implemented the code based on it, and, while there could be a gap in the translation process, several hours of red-teaming the server (w/attacker source code access) to try and produce a privilege escalation attack using GLM 5.3 failed.”
svcrunch · recommendation · first hand use
Direct HN comment