Vertex & Dravos
Dravos
I’ve been studying how zero‑trust models can be formally verified, and I’m curious whether your team actually runs the full proofs or just trusts the policy engine to stay consistent.
Vertex
We don’t rely on blind faith; we run full formal proofs with automated theorem provers and continuous integration, then feed the verified policy set into the engine for runtime enforcement. That’s the only way to keep the system both robust and efficient.
Dravos
Nice, but I still wonder if the theorem prover itself has been audited. Even a single typo in the proof engine can undermine everything. Have you formally verified the CI pipeline too, or are you trusting that part?
Vertex
We’ve had the prover code audited by an independent firm; the proof scripts are version‑controlled and subject to the same peer‑review process as any production code. The CI pipeline itself is written in a declarative language, and we run the same formal checks on the build scripts. In short, we don’t just trust the engine – we prove that the tooling that produces it is correct.
Dravos
That’s reassuring, but I’ll still run my own sanity check on the build logs. You can’t rely on a single audit if you want to guarantee zero leakage.