Search papers, labs, and topics across Lattice.
This paper introduces Forge, a closed-loop pipeline that integrates formal verification with vibe coding to enhance the safety and certification of AI-generated software in compliance with standards like DO-178C and ISO 26262. By leveraging Model-Driven Engineering (MDE), the approach generates Java source code from LLM outputs and subsequently extracts formal artifacts for verification through multiple methods, including deductive verification and theorem proving. The results demonstrate that this pipeline can produce relevant verification evidence, marking a significant advancement toward certifying LLM-generated code for safety-critical applications.
Forge transforms LLM-generated code into safety-critical software by seamlessly integrating formal verification, paving the way for certification in regulated environments.
Vibe coding -- accepting LLM-generated source from natural-language intent with minimal review -- is fast and may be adequate for low-criticality consumer software. But for safety-critical systems governed by DO-178C, IEC 61508, or ISO 26262, it offers no path to certification: large language models (LLMs) provide no formal correctness guarantees, and existing remedies target verification-aware languages (Dafny, Verus, Lean) that are scarce in pretraining data and absent from industrial toolchains. This paper closes the gap. We present Forge (Formal method Oriented Refinement loop for GEnerated code): a closed-loop pipeline that guides vibe coding through formal verification using established Model-Driven Engineering (MDE) infrastructure. Through vibe coding, we generate Java source code; our pipeline then extracts -- via model transformations -- formal artefacts in three different formalisms, each checked by a complementary verifier: deductive verification (Dafny), Communicating Sequential Processes (CSP) refinement via the Failures-Divergences Refinement checker (FDR4), and theorem proving using Z-Machines in Isabelle; every verification failure becomes a structured correction prompt that drives the next code-generation iteration. The LLM is the draft generator, the MDE chain is the discriminator, and the developer never has to read the formal models. Empirically, we find that the pipeline produces standards-relevant verification evidence for LLM-generated Java -- a step toward certification.
Tsinghua AI