feed · watching · stats · help with your tokens
anthropics/FlashProve
FlashProve is a research prototype for zero-knowledge proofs of AI inference that allows providers to prove model identity without revealing weights.
It solves the problem of verifying AI model identity for providers by allowing them to prove which model generated a response without exposing the underlying weights, ensuring trust without compromising intellectual property. The protocol's soundness is proved in Lean 4, ensuring that a provider passing off non-committed output is caught with high probability.
Similar
- JustVugg/colibri
colibri is a C inference engine that runs very large open mixture-of-experts models on the machine you already have.
- deepseek-ai/dsh-superagent-prototype
dsh-superagent is a research prototype for a proactive coding agent that works on a single GitHub repository using DeepSeek Harness.
- NVIDIA/auto-ontology
An open context layer that turns database metadata into an ontology, so AI agents answer questions about enterprise data with fewer wrong answers.
- pgEdge/ai-dba-workbench
A PostgreSQL monitoring system that combines traditional and AI-based monitoring for instances v14+ including Supabase and Amazon RDS.
- finic-ai/kairos
Kairos is an open-source, real-time fraud and risk decisioning platform for sign-ups, logins, orders, payments and payouts.
- zhanghao123vip/ai-manju-skills
A collection of 21 genre-specific templates for generating full AI comic drama production workflows, including scripts, prompts, and release assets.
- mycelium-hq/ai-brain-starter
AI Brain Starter is a verification harness for Claude Code that provides persistent memory, deterministic guards, and session lifecycle management to prevent context corruption.
- aaitor/skill-video-studio
A local video-production workspace driven by a Claude Code skill that turns a product walkthrough into a polished demo video.
sources
Claims below include README evidence. A matching quote or worker agreement does not establish that a claim is correct. Category majority among 2 workers. Version 1.
FlashProve is a research prototype for zero-knowledge proofs of AI inference that allows providers to prove model identity without revealing weights.
A research prototype for zero-knowledge proofs of AI inference.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
It solves the problem of verifying AI model identity for providers by allowing them to prove which model generated a response without exposing the underlying weights, ensuring trust without compromising intellectual property.
FlashProve lets an AI provider prove which model answered a request, without revealing the model's weights.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
The protocol's soundness is proved in Lean 4, ensuring that a provider passing off non-committed output is caught with high probability.
The protocol's soundness is proved in Lean 4. A provider that tries to pass off output that is not the committed model's is caught, except with probability about q/2^124 + 2^-101 after q hash queries.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Allows AI providers to prove which model answered a request without revealing the model's weights.
FlashProve lets an AI provider prove which model answered a request, without revealing the model's weights.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Anyone can verify the proof on an ordinary CPU in seconds using `cp_verify` without needing the model weights.
Anyone can check the proof on an ordinary CPU in seconds with `cp_verify`, without the weights.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Runs Llama 4 Maverick at full size with a 1,024-token context window on a single NVIDIA H100.
FlashProve runs Llama 4 Maverick at full size, with a 1,024-token context window, on a single NVIDIA H100.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
The prover reaches about 110 tokens/second of prefill at 24 requests per batch.
The prover reaches about 110 tokens/second of prefill at 24 requests per batch
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Designed to be built, run, and checked by a coding agent due to long builds and exact comparisons.
Building FlashProve, running it and checking its output take long builds and many exact comparisons. That work is meant for a coding agent.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Includes a small model example with synthetic weights to demonstrate that the verifier works.
This example is a small model with synthetic weights, so it shows only that the verifier works, not anything about a served model.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Enables AI providers to cryptographically prove the identity of the model used for inference without exposing model weights.
FlashProve lets an AI provider prove which model answered a request, without revealing the model's weights.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Uses a commitment ID to bind the provider to a specific set of secret weights, masking all dependent values except a declared list.
The provider publishes a commitment ID, which binds it to one set of weights. The weights themselves stay secret
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Generates zero-knowledge proofs on a GPU for each reply to demonstrate it matches the committed model's output.
For each reply, the provider's GPU produces a proof that the reply is the committed model's output.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Allows anyone to verify proofs on an ordinary CPU in seconds without needing access to the model weights.
Anyone can check the proof on an ordinary CPU in seconds with cp_verify, without the weights.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Includes a formal proof of soundness in Lean 4, ensuring a provider cannot pass off output from an uncommitted model.
The protocol's soundness is proved in Lean 4.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Demonstrated running the full-size Llama 4 Maverick model with a 1,024-token context window on a single NVIDIA H100 GPU.
FlashProve runs Llama 4 Maverick at full size, with a 1,024-token context window, on a single NVIDIA H100.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Provides high soundness where attempting to use an uncommitted model is caught with probability approximately q/2^124 + 2^-101 after q hash queries.
A provider that tries to pass off output that is not the committed model's is caught, except with probability about q/2^124 + 2^-101 after q hash queries.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Designed to be run by an agent due to long build times and the need for many exact comparisons during execution.
Building FlashProve, running it and checking its output take long builds and many exact comparisons.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Requires the commitment ID to be obtained from a trusted party rather than the server being checked or files accompanying the proof.
The commitment ID: get it from a party your user trusts, never from the server being checked or from files sent with the proof.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Is a research artifact in version 0.16.0 that is not maintained and does not accept contributions.
Version 0.16.0 · A research artifact: not maintained, not accepting contributions.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Keeps model weights secret by masking every published value that depends on them, except for a specifically declared list.
The weights themselves stay secret: every published value that depends on them is masked, except a declared list.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Limitation: It is a research artifact that is not maintained and does not accept contributions.
Version 0.16.0 · A research artifact: not maintained, not accepting contributions.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Limitation: Must be run from the repository root as an ordinary user, never as root or under sudo.
Run everything from the repository root as an ordinary user, never as root or under `sudo`.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Limitation: Exits with code 2 at the start if there is too little memory.
With too little memory it exits with code 2 at the start.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Limitation: The project is a research artifact that is not maintained and does not accept contributions.
A research artifact: not maintained, not accepting contributions.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Limitation: The commitment ID must be obtained from a trusted party and cannot be sourced from the server being checked or proof files.
The commitment ID: get it from a party your user trusts, never from the server being checked or from files sent with the proof.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Limitation: The prover exits with code 2 at the start if there is insufficient memory available.
With too little memory it exits with code 2 at the start.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Limitation: The GPU proof generation process can remain silent for over 15 minutes, logging progress to a file in a directory it creates first.
It can be silent for over 15 minutes. It logs to quickstart-gpu.log in a directory it names first.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Limitation: The commitment ID cannot be obtained from files sent with the proof, with the only exception being the stored examples.
The stored examples are the only exception.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
Limitation: Stored examples use small models with synthetic weights, demonstrating only that the verifier works rather than reflecting a served model.
This example is a small model with synthetic weights, so it shows only that the verifier works, not anything about a served model.
Quote matched the README or GitHub description at extraction. Same claim and quote from 1 worker(s). Interpretation not reviewed by a maintainer.
ai-ml · other