Originated Lean. Aeneas-based Lean verification of Rust SymCrypt: "complete proofs for the Rust ML-KEM and SHA3 code that is being used in insiders builds of Windows today"13
Lean 4, Fall 2026
Every once in a while I try to take a quick snapshot of where we are today regarding the impact of Lean 4 beyond research. The numbers here could be off, so don't quote them, but they're ballpark right at a glance.
Production software, formally verified
Cedar authorization language, modelled in Lean and differentially tested against the production Rust14; the proofs found 4 validator bugs and testing found 21 more15
AI solving already-formalized problems
BFS-Prover — best-first search over Lean 4, open-sourced; 72.95% on MiniF2F18
HunyuanProver — scalable data synthesis with guided tree search for automated theorem proving19
Informal mathematics into formal
AlphaProof — reinforcement learning over Lean; olympiad-level formal reasoning, published in Nature12
Leanstral — "the first open-source code agent designed for Lean 4", weights under Apache 2.0, evaluated on the Fermat's Last Theorem project22
Aristotle — "among the first AI models to achieve formally verified gold medal-level performance on the 2025 International Mathematical Olympiad"23
Gauss completed "a challenge set by Fields Medallist Terence Tao and Alex Kontorovich … to formalize the strong Prime Number Theorem (PNT) in Lean"24; OpenGauss released MIT-licensed25
Mathesis — natural language to Lean 4 via an RL-trained autoformalizer26
New mathematics, machine-checkable
Market capitalizations retrieved 2 September 2026, in USD. Tencent is reported by some aggregators at roughly twice the figure above; this follows the exchange's own arithmetic — HKD 438.20 × 9.00B shares = HKD 3.94T, about $503B.7 Italic tags mark figures that are not completed rounds. The boundaries between these four groups are soft: Harmonic, Mistral and Google DeepMind — and increasingly OpenAI and Anthropic — work across specification, formalization and proof at once.
All thirty sources Each was retrieved and read against the claim it supports, not merely checked for a live URL.