Remix.run Logo
Remix clone Hacker News
new | show | ask | jobsGithub
▲ Introduction to Formal Verification with Lean Part 1(hashcloak.com)
127 points by badcryptobitch 3 days ago | 12 comments
▲danabramov 2 hours ago | parent | next [-]

Lean is super cool. If you're curious how proof checking works (on the type system level), I wrote an article about that: https://overreacted.io/beyond-booleans/

Here's another article I wrote that gives some intuition about the role of axioms in Lean: https://overreacted.io/the-math-is-haunted/

And here's a longer primer on Lean's syntax: https://overreacted.io/a-lean-syntax-primer/

Finally, if this got this even a little bit curious, I strongly encourage you to play the Natural Number Game: https://adam.math.hhu.de/#/g/leanprover-community/nng4

This is the best intro to Lean I know, plus it teaches you why a + b = b + a.

▲nh23423fefe 11 minutes ago | parent [-]

        induction b with d hd
        rw [add_zero, zero_add]
        rfl
        rw [add_succ, succ_add]
        rw [hd]
        rfl
i really enjoyed finally internalizing dependent type theory. it helped a lot with that.
▲rik-x 2 hours ago | parent | prev | next [-]

(Asking as an interested noob) -- How is this different to something like 'assert' statements in Python?

▲mmsc 4 minutes ago | parent | next [-]

it's like proof by induction versus trying every number from 0 to infinity

▲linguae 2 hours ago | parent | prev | next [-]

I’m an noob to Lean myself, but my best explanation is that asserts are checks that happen at runtime. Imagine compile-time asserts, where the compiler is able to determine the validity of assertions without needing to run the program. Formal verification techniques make this possible. In Lean, it is possible to write a proof that, if true, guarantees that the code works.

▲danabramov 2 hours ago | parent | prev | next [-]

It works on the type system level instead of at runtime. So you don't actually need to "run" any code to verify it, and you can verify it for all possible inputs, even infinity of them, rather than for the ones that exist in your test.

▲throwaway_7274 2 hours ago | parent | prev [-]

Assertions are for testing at runtime. They demonstrate that the behavior is correct on one input when it runs. Formal verification proves that the code is correct on _all_ inputs _before_ it runs.

▲qiqitori 2 hours ago | parent | prev | next [-]

https://www.amazon.com/Maths-Proofs-Lean-First-Steps-ebook/d... I like this author and a while ago found that he'd published a book on Lean!

In the end I wasn't able to read it on my ebook reader and reading it on a PC or smartphone kinda makes it annoying to read on the commute. So I've only read the first two chapters or so but it seemed like a lot of fun. All this talk about using Lean in AI-powered proofs kinda makes me want to pick it up again.

▲charlieyu1 an hour ago | parent | prev | next [-]

I just wish Lean4 is easier to use. Tried Mathematics in Lean and couldn’t even get the dependencies right

▲dev_dan_2 2 hours ago | parent | prev | next [-]

Great tutorial, really enjoyed it! Personally, I think languages that can check very much at compile time in combinations with LLMs have a bright future ahead. Additionally, if one wanted to give Haskell a try, Lean4 might be a good language to check out before, as it is more modern and ticks many of the same boxes (Still has some unique features, and the communities quite a lot).

Small feedback: - Great flow, explaination, motivation and so on! :) - Typo: "conext" at the bottom - If you want to keyword-hack a bit, you could introduce a paragraph or too about the role the relationship of Lean4 with LLMs/AI ;)

▲DennisP an hour ago | parent [-]

Vitalik recently wrote about vibe-coding in Lean and assembly language, using proof verification in Lean, saying "if done right, this has potential to both output extremely efficient code, and be far more secure than the way programming has been done before."

https://vitalik.eth.limo/general/2026/05/18/fv.html

▲smasher164 an hour ago | parent | prev [-]

a) Thanks for putting this together!

b) Please don't hijack my scrolling.

c) I really wish Lean were more mature as an application programming language. Its standard library is really lacking.