For critical Go code, do not stop at tests.
For critical Go logic that moves money, such as refunds, fees, balances, and reserves, we mechanically check whether specified properties hold under explicit assumptions and scope. Gemini generates proof candidates, and the independent MPK kernel makes the final verdict.
Assurance beyond tests
Check the specified property across the target scope, not only selected inputs.
Start with one Go function
Start from a critical policy function, not a special proof language.
Do not trust AI directly
AI prepares candidates; final acceptance belongs to the independent kernel.