Formal Systems

Formal verification for critical open source

All of modern digital infrastructure stands on a few pillars.
etcd. Apache Kafka. Apache Flink. And yours.

Diagram: a stack of blocks labelled All modern digital infrastructure resting on purple pillars labelled etcd, Flink, Kafka and your building block, with the caption Critical core formalized and verified with TLA+.

Fast-moving applications.
Trustworthy foundations.

Applications change every day. The pillars can't afford to.

Contact us Learn more

What we do

Formal Systems makes critical open source systems more trustable by applying TLA+ formal verification, in addition to standard testing and empirical validation.

We write and maintain TLA+ specifications of the protocols at the heart of these systems, model-check them, and bind them to the implementation so that every fix is justified by a verified model, not only by a passing test suite.

Open systems with bug fixes

We provide open-source etcd, Apache Kafka and Apache Flink with bug fixes backed by formal TLA+ tools, and more systems are coming.

Coordination

etcd

Distributed key-value store behind Kubernetes.

Streaming

Apache Kafka

Event streaming platform.

Processing

Apache Flink

Stateful stream processing.

Next

Your building block

Running on a system your business can't afford to get wrong? Talk to us.

Services

Technology and assurance services to financial entities and market infrastructures.

Specify

Formal specification

Formal specification of settlement and interoperability workflows.

Verify

Machine-checked verification

Machine-checked verification of safety and liveness guarantees, with reproducible evidence.

Explain

Counterexample analysis

Counterexample analysis in business language.

Before build

Change verification

Verification of proposed rulebook or process changes before build.

Sync

Specification and code

Methodology and tooling for keeping formal specifications synchronised with implementation code.

Formal Systems does not hold client assets, does not operate any settlement or payment system, and does not provide any financial, investment or payment service.

Get in touch

Bug fixes, formal specifications, or a conversation about trusting your foundations.