A proof checker can confirm a formal claim is valid, but no checker tells you whether it says what you actually meant.
Can machines verify that formal statements mean what we intend?
This explores whether a proof checker or formal verifier can confirm not just that a formal statement is valid, but that it actually captures the idea a person meant to express. In other words, whether the step that translates intent into formal logic can itself be checked.
This explores whether machines can confirm that a formal statement matches the intended meaning, not just whether it is logically valid. The short answer from the corpus: verifiers are very good at the second job and offer no guarantee on the first. A proof assistant like Lean will tell you a theorem follows from its premises. It cannot tell you the theorem says what you had in mind. All the risk sits in the translation step, and that is where LLMs fail in a quiet way. They produce logic that is well-formed and type-checks, yet means something slightly different. The errors cluster in predictable places: which part of a sentence a quantifier covers, "some" vs. "all," and how finely concepts are broken into predicates Can large language models translate natural language to logic faithfully?. A wrong formalization that passes every check is arguably worse than an obvious failure, because the checker's approval makes it look trustworthy.
The same study turns up a useful asymmetry: LLMs seem to understand formal language better than they generate it. That suggests machines may be more reliable at reading a formal statement back and judging it than at writing it in the first place. The problem also runs deeper than single sentences. Meaning in mathematics depends on surrounding definitions and axioms. Translating one statement at a time only works because libraries like Mathlib already supply that context, which hides how much of the meaning lives in the wider theory Can autoformalization work on individual statements alone?. So checking intent means checking whether a whole system of definitions fits together the way you meant, not just one line.
Outside mathematics, the same gap appears in a more practical setting. The interwhen system automatically turns prose policy documents into code-based verifiers, including provably correct Lean and z3 checkers Can we automatically generate formal verifiers from policy text?, and runs them alongside a model's reasoning at almost no extra cost Can verifiers monitor reasoning without slowing generation down?. That works well, but notice where the trust has moved. The checkers are provably correct relative to the LLM's translation of the policy. If that translation misreads the policy, the system enforces the misreading rigorously. This matters because hallucination is formally unavoidable for any computable LLM, so outside safeguards are necessary Can any computable LLM truly avoid hallucinating?. A safeguard built from a model's interpretation inherits that model's blind spots unless something independent checks the specification itself.
This mirrors a pattern seen in reasoning research. Traces that look rigorous often don't reflect what the model actually computed, and invalid steps can perform about as well as valid ones Do reasoning traces show how models actually think? Can we actually trust reasoning model outputs?. Correct form and correct meaning keep separating. Two responses stand out. The Darwin Gödel Machine sets formal proof aside and judges self-modifications by whether they actually improve benchmark scores Can AI systems improve themselves through trial and error?. That swaps "does this mean what I intended?" for "does this do what I wanted?" The Leiden Declaration takes the human route: mathematicians who use AI keep sole responsibility for correctness, because a proof is meant to deliver both certainty and understanding, and formal verification can secure only the first Can AI-generated proofs ever replace human mathematical understanding?.
So the takeaway: formal verification doesn't remove the need for trust. It concentrates it. Everything after the formal statement can be checked mechanically, which makes the translation into that statement the one place where meaning can quietly go wrong. Today that point is protected by human judgment, by empirical testing, or by having a model check translations rather than write them.
Sources 9 notes
LLMs generate well-formed logical expressions that are semantically incorrect, with errors clustering at scope ambiguity, quantifier precision, and predicate granularity. The asymmetry suggests LLMs understand formal language better than they can generate it.
Real formalization requires theory-level work: even one theorem needs a coherent web of axioms, definitions, and lemmas. Statement-level approaches only succeed by borrowing from prebuilt libraries like Mathlib, hiding the actual complexity involved.
interwhen automatically generates code-based verifiers—including provably correct Lean and z3 checkers—from prose policy documents. This inverts the usual neuro-symbolic division: the LLM both translates policy to formal logic and extracts verifier inputs from reasoning traces.
Decoupling verification from generation lets verifiers run alongside a single trace, forking to extract verifiable state and intervening only on violations. On correct runs the latency penalty is near-zero; interwhen matches or beats CoT across benchmarks at similar token budgets.
Three formal theorems prove that any computable LLM must hallucinate on infinitely many inputs, and internal mechanisms like self-correction cannot eliminate this mathematical constraint. External safeguards are therefore necessary, not optional.
Show all 9 sources
LLM reasoning traces perform as persuasive appearances rather than reliable explanations of computation. Invalid logical steps perform nearly as well as valid ones, and corrupted traces generalize comparably, showing that semantic correctness is not what produces the performance gains.
Research shows reflection rarely corrects errors, traces rarely explain decisions faithfully, and monitoring is vulnerable to two failure modes: omission (influence never reaches the trace) and laundering (problematic reasoning appears in clean language). These vulnerabilities persist even under evaluation pressure.
DGM replaces formal proofs with empirical benchmarking and maintains an evolutionary archive of agent variants, achieving 2.5× improvement on SWE-bench and 2.2× on Polyglot by discovering capabilities like better code editing and context management.
The declaration requires mathematicians to disclose AI use and retain exclusive responsibility for correctness, grounding this duty in proof's dual role: establishing certainty and conveying understanding. Formal verification alone cannot secure both goods.
Papers this line draws on 8
The research behind the notes this line reads — ranked by how closely each paper relates.
- interwhen: A Generalizable Framework for Steering Reasoning Models with Test-time Verification
- Theory-Level Autoformalization: From Isolated Statements to Unified Formal Knowledge Bases
- Beyond Semantics: The Unreasonable Effectiveness of Reasonless Intermediate Tokens
- Local Coherence or Global Validity? Investigating RLVR Traces in Math Domains
- Stop Anthropomorphizing Intermediate Tokens as Reasoning/Thinking Traces!
- From Solvers to Research: Large Language Model-Driven Formal Mathematics at the Research Frontier
- Verification abundance, adjudication scarcity: what happens to mathematical knowledge when proof checking becomes free
- Logic-LM: Empowering Large Language Models with Symbolic Solvers for Faithful Logical Reasoning