Search papers, labs, and topics across Lattice.
This paper introduces Schwarz, an agentic verification harness that enhances the process of transforming source-level specifications into SMT obligations for solvers. By localizing proof failures and turning them into manageable repair tasks, Schwarz significantly improves the verification process for programs written in C and Rust/Verus. The results demonstrate that Schwarz achieves a 95.2% success rate on 475 benchmarks and a 91.5% success rate on 1,000 tasks from the SV-COMP 2026 ReachSafety track, outperforming existing tools like CPAchecker.
Schwarz transforms failed verification into actionable repair tasks, achieving over 90% success rates on complex benchmarks where traditional methods struggle.
Agentic verification systems can often generate source-level specifications that look plausible, but plausibility is not enough: the verifier must still turn those specifications into SMT obligations that the solver can prove. When this step fails, current LLM-driven loops usually expose only a coarse verifier error, timeout, or unknown solver result. The model cannot tell whether the specification is wrong, a helper lemma is missing, the proof context contains irrelevant facts, or the obligation needs a different theory view. This paper presents Schwarz, an agentic verification harness that makes SMT-backed proof failure local, checkable, and repairable. Schwarz turns failed verification into obligation-local repair tasks: program-point snapshots expose checked facts at a boundary, local lemmas let the agent propose missing proof steps, and theory-aware solver policies guide the agent toward solver-friendly formulations for numeric, quantified, memory, and floating-point obligations. We implement Schwarz for C and Rust/Verus and evaluate it on 1,475 tasks. On 475 benchmarks from recent agentic verification tools, Schwarz solves 95.2% of the tasks. On 1,000 tasks from the SV-COMP 2026 ReachSafety track, averaging 1,427 LOC, Schwarz solves 91.5% of the tasks, compared with 60.1% for CPAchecker. Ablations and comparison with a pure-agent baseline show that solver-aware repair is effective and scalable.
