Search papers, labs, and topics across Lattice.
This paper introduces SpecRL, a reinforcement learning framework for synthesizing formal specifications in Dafny by using negative tests as a signal for specification completeness. SpecRL trains a model to generate specifications, using the fraction of negative tests rejected by the specification as a reward signal, in addition to standard verification feedback. Experiments show that SpecRL outperforms supervised fine-tuning and RL with a binary reward in terms of specification strength and verification success, while also demonstrating generalization to out-of-distribution benchmarks.
RL agents can learn to write stronger formal specifications by using automatically generated negative tests as a reward signal for completeness, outperforming standard verification-based rewards.
The specification synthesis task aims to automatically generate specifications, together with any necessary auxiliary verification annotations, for existing programs. This task is important because such specifications serve as behavioral contracts that support modular reasoning and reusable verification across a codebase. At the same time, it remains challenging because verifier-only feedback is fundamentally incomplete: passing verification establishes soundness, but cannot distinguish weak specifications from strong ones. What is missing is a fine-grained signal for specification completeness. We present SpecRL, a reinforcement learning framework for specification synthesis in Dafny. SpecRL introduces a self-contained pipeline that generates negative tests, i.e., input-output pairs that can never be produced by the program. We use the fraction of these negative tests rejected by a candidate specification as a signal of specification completeness, which is integrated into the reward for RL training. Experiments across four model sizes show that SpecRL improves both specification strength and verification success over SFT and RL with a binary specification-strength reward, generalizes to an out-of-distribution benchmark, and remains competitive on that unseen benchmark compared to much larger general-purpose LLMs.
