People have said for years that end to end autonomy will not work. FSD and Robotaxi already answer that. The next decade is fleets that learn a city overnight and robots that take the same stack off the road and into the world. The spec catches up to the system, not the other way around. @teslasi
Great example of proactive safety xitter.cf/aelluswamy/status/2104…
As a formal methods guy, I would like to see the properties/statements for both lean and TLA+
Overall great to see formal
I used Opus 5.5 to formally verify the Claude Agent SDK using Lean. A couple short prompts = 16 PRs fixing various bugs and race conditions. Video attached.
TLA+ also works well. I sometimes combine Lean and TLA+ to look for issues around data flow, concurrency, and state mgmt.
I don't know either language well, but Claude is excellent at both. This approach is super useful for formally modeling your code and finding bugs that a human probably wouldn't have spotted.
Is formal verification the future of coding (or at least, bug finding)?
Decomposing autonomous driving into sense → perceive → plan doesn't make it safer. It makes it easier to audit, which isn't the same thing.
Safety is a system-level property. You can have modules that each pass their own tests and still get failures at the interfaces, where the real bugs live.
Decomposition works great for hardware and for vertical software stacks, where interfaces are well-defined and boundaries are natural. Decomposing the driving task doesn't give you that. It just gives you lossy abstractions at every handoff.
Worth remembering: the human brain isn't cleanly modular either. Perception and planning are deeply entangled, not a pipeline. Maybe the right question isn't "modular vs end-to-end" but "how do we verify systems whose safety lives in the interactions, not the parts
Heads up, robotics: car autonomy is on track to be solved and the sensor wars are coming for you sooner than you think. Same people, same slides. The plastic bag drifting across the freeway is now a small object on your kitchen floor matching the floor color and it puts your robot on its back.
I am not talking about Lidar.
Umair S retweeted
FSD doesn’t need to squint its 👁️ when facing the ☀️.
Wow. FSD and I were staring straight into the sun near Pagosa Springs, CO. FSD started to slow down. I initially started to override it, but remembered that FSD is usually right so I let it slow. Boy was it right. I would've hit this deer. @aelluswamy @teslasi









