Code that ships with its own proof.

teleon.dev/docs/proof proves concurrent code correct in Rocq with the Iris separation logic, and ships it as .cwasm modules that carry their proofs. The loader checks a module's proof before the module runs.

v44.0teleon.dev/docs/proofSeparation logichttpsjson

Read the docs Copy the agent prompt

One module, proved

Concurrent codea lock-free queue, compiled to .cwasm

Specificationpush and pop each act as one atomic step

Rocq and Iris proofseparation logic, machine-checked

Proof-carrying .cwasmmodule and proof stored together in S217

Loader checkproof verified, then the module runs

The loader rechecks the proof against the module's bytes, so a module runs once its proof matches its code.

What it does

Concurrent separation logic

Iris reasons about shared memory one owned resource at a time, so proofs of concurrent code compose.

Proved in Rocq

Specifications and proofs are written and machine-checked in the Rocq prover.

The proof travels with the code

Each .cwasm module carries its proof, and the loader checks it before the module runs.

The contract

A module record names the .cwasm content ID, the specification it meets and the proof that links the two.

LogicIris concurrent separation logic, S216

ProverRocq

OutputProof-carrying .cwasm, S217

Queuesaq651 to aq700, v44.0

Identifiers

.cwasm
verified_for_conditions

Execution contracts

Request and responseCopy

POST /v1/proof/verify
Host: api.teleon.dev
{
  "module": "swh:1:cnt:7a2d...91",
  "spec": "queue_push_pop_atomic",
  "logic": "iris"
}

# Response
{
  "module": "swh:1:cnt:7a2d...91",
  "spec": "queue_push_pop_atomic",
  "prover": "rocq",
  "proof_checked": true,
  "admission": "verified_for_conditions"
}

Endpoints

Method	Path	Access	What it does
`POST`	`/v1/proof/verify`	RING-2	Check a proof-carrying .cwasm module
`POST`	`/v1/proof/obligations`	RING-2	Submit a specification for proving
`GET`	`/v1/proof/modules/{swhid}`	RING-3	Read a module's proof and specification

Listed paths appear in the service’s published files today. This surface comes from the Teleon Omnibus Codex v1.0 to v50.0, Oct 25, 2026. In the one-host plan every path here is served under api.teleon.dev/v1/proof.

How it connects

Reads from

Deterministic micro-agentsteleon.dev/docs/dma Verification sandboxteleon.dev/docs/sandbox Content storeteleon.dev/docs/cas

Feeds into

Workersteleon.dev/docs/workers Confidence scoresteleon.dev/docs/confidence Assurance and evidenceteleon.dev/docs/assurance

Queuesaq651-aq700

StoresS216 Rocq and Iris Separation Logic S217 Proof-Carrying .cwasm

For agents

Give your agent the read-only guide first. It reports back before any write.

Agent prompt

Read https://teleon.dev/docs/proof.md and explain how a module's proof is checked before it runs. Read only.

Copy

llms.txt Agent card

Words on this page

Full glossary

Separation logic: A logic for programs that share memory: each proof covers the resources a piece of code owns, so proofs compose.
Proof-carrying code: Code shipped with a machine-checkable proof of its properties, which the loader checks before the code runs.
.cwasm: Precompiled WebAssembly: a module compiled ahead of time, so it starts fast and runs at native speed in the sandbox.