Search papers, labs, and topics across Lattice.
This paper introduces Vero, a benchmark designed to evaluate the ability of AI agents to jointly synthesize implementations and formal proofs for multi-module software repositories. By incorporating 43 instances from real-world codebases and allowing agents to prove unsatisfiability or incorrectness, Vero addresses the challenge of ensuring correctness in AI-generated code. The evaluation reveals that even the most advanced agents struggle, fully solving only 27 out of 43 instances, highlighting the current limitations in repository-scale verified software synthesis.
AI agents can only correctly synthesize implementations and proofs for less than two-thirds of tested multi-module software repositories, revealing significant gaps in current capabilities.
AI agents are increasingly used for programming, but do not provide any guarantee on the correctness of generated code. Verified code generation, in which an agent produces both an implementation and a machine-checked proof of its specification, offers a stronger path toward trustworthy AI-generated software. Existing benchmarks in this direction either focus on individual functions or only evaluate proof generation with provided implementations. It is still an open question whether agents can make coherent implementation and proof choices across real multi-module codebases. To bridge this gap, we introduce Vero, the first benchmark to evaluate joint implementation and proof synthesis at the repository level. Vero contains 43 multi-module instances sourced from real-world repositories spanning Python, Dafny, Verus, and Coq, and covering diverse domains from cryptographic protocols to distributed systems. Each instance consists of a multi-module Lean 4 repository with predetermined API interfaces, manually curated formal specifications, and reference implementations, supporting both proof-only and code-and-proof evaluation modes. To improve benchmark reliability, Vero also includes an audit mechanism where agents are allowed to formally prove unsatisfiability of provided specification or incorrectness of reference code, which surfaces and corrects latent code and specification errors during curation. We evaluate frontier coding-agent configurations with Lean toolchain access. The strongest agent fully solves only 27 of 43 instances and closes no specifications on the hardest repositories. Vero provides a concrete testbed for measuring progress toward repository-scale verified software synthesis, where current agents still fall short. We release the benchmark, curation pipeline, and evaluation harness at https://github.com/sunblaze-ucb/vero.
BAIR