Skip to main content

PIC Formal Model

The PIC Formal Model is supported by a paper and three complementary proof artifacts. They are intentionally different: Lean proves the abstract mathematics, Tamarin checks stateful message-level safety, and ProVerif gives an independent symbolic check of the authentication core.

WorkAuthorDescriptionReference
Proof-of-Continuity: A Temporal Model for Authority Propagation in Distributed Systems and AI AgentsNicola GalloFormal foundation of the PIC Model: temporal model of authority propagation and confused deputy resolution.arxiv.org/abs/2607.08906
PIC Lean Formal ProofNicola GalloMachine-checked Lean 4 formalization of the paper's definitions and theorems.overview / source
PIC ProVerif Symbolic ProofNicola GalloSymbolic verification of PoR eligibility, key control, and non-vacuity for the message-level protocol core.overview / source
PIC Tamarin Symbolic ProofNicola GalloSymbolic trace proof of origin-bound authority, irreversible branch-local drop, PoR eligibility, and key control.overview / source

How to read the proofs together

QuestionProof artifact
Is the model mathematically consistent and origin-bounded for arbitrary finite chains?Lean
Does the symbolic protocol preserve safety across traces, public tokens, branching, and compromised workload keys?Tamarin
Does accepted advancement require trusted PoR evidence and workload key control?ProVerif