Notes on Executable Specs, Verification, and Reliability
Writing and talks from the edge cases.
I’m Dr. Thomas Pani. This is where I write about executable specs, test oracles, adversarial testing, formal verification, and the failure modes that matter in platform, infrastructure, and protocol systems.
Notes on Executable Specs, Verification, and Reliability
Writing and talks from the edge cases.
I’m Dr. Thomas Pani. This is where I write about executable specs, test oracles, adversarial testing, formal verification, and the failure modes that matter in platform, infrastructure, and protocol systems.
Talks & Writing
I give talks and workshops on fuzzing, executable specs, model-based testing, formal methods, and protocol safety.
From time to time, I also write about what I learn along the way.
Formal Verification of the Aztec Governance Protocol
2025-12-09An in-depth report of formally verifying Aztec's governance protocol, highlighting key decisions and outcomes.
Talk: 25-Minute Solidity Fuzzer — Fuzzing Smarter, Not Harder
2025-07-02
Recording of my hands-on workshop from Protocol Berg 2025 in Berlin.
Build a functional EVM/Solidity smart contract fuzzer in Python in just 25
minutes!
Why Formal Verification Isn't Just Fancy Exhaustive Testing
2025-06-28A deep dive into the differences between formal methods and exhaustive testing, and why they are not interchangeable.
Fuzzlands: Map of the Wider Fuzzing Landscape
2025-05-27An playful practitioner's guide to fuzzing tools, techniques, and their evolution.
Get in Touch Limited Availability
Want to try this on a real system?
I take on focused pilot projects for teams with concrete distributed-system testing pain.
Discuss a Pilot Project- Best fit: control planes, schedulers, Kubernetes controllers, payment systems, consensus protocols, databases, and stateful cloud infrastructure.
- A first call is 30 minutes, no preparation needed, and there is no commitment.
- I typically respond within one business day.
