01 What happened
On November 10, 2026, Google DeepMind announced its researchers mathematically proven key security properties of Signal’s protocol code using AlphaProof Code. The process took four weeks, a task historically requiring years. Gemini Carbon-powered AI agents generated over six million lines of Lean, verifying the compiled implementation. Prior verification stopped at design level; this is the first AI verification of a widely deployed protocol at implementation depth. The company open-sourced verification artifacts.
02 Key details
- AlphaProof Code uses AI agents to split verification work between humans and AI.
- It verified Signal’s compiled code, not just its design, bridging a common vulnerability gap.
- Gemini Carbon generated over six million lines of Lean code to prove security.
- Previously fixed bugs were automatically detected, confirming system effectiveness.
03 Why it matters
Demonstrates AI’s ability to perform deep formal code verification in weeks, previously requiring years.
04 Who it matters to
AI agent developers, voice interface developers, infrastructure engineers, devOps specialists and data engineers.