Rohan Padhye (@moarbugs) profile picture

Associate Professor at @S3DatCMU @SCSatCMU & Researcher at @AntithesisHQ.

Pittsburgh, PA
Joined September 2018
Photo by Rohan Padhye (@moarbugs)Photo by Rohan Padhye (@moarbugs)Photo by Rohan Padhye (@moarbugs)Photo by Rohan Padhye (@moarbugs)Photo by Rohan Padhye (@moarbugs)Photo by Rohan Padhye (@moarbugs)Photo by Rohan Padhye (@moarbugs)Photo by Rohan Padhye (@moarbugs)Photo by Rohan Padhye (@moarbugs)Photo by Rohan Padhye (@moarbugs)
My research group has a new website! cmu-pasta.github.io
10
2
159
Hard to answer in absolute terms, but: I conjecture that the total compute dedicated to software correctness will eventually follow: matrix multiplication > systematic logic > random search (it has historically been the other way around)
Can formal verification fully replace fuzzing? Genuine question.
1
9
2,635
In my role as PhD advisor, I'm nowadays just telling my students to pick an important problem: 1. That is not trivially solvable by AI today 2. That is not theoretically unsolvable 3. For which a solution technique will just get better with AI advancements, not obsolete.
55
129
17
1,364
115,806
This is obviously easier said than done. But, I think being able to form an intuition for identifying these kinds of niches is *precisely* the differentiator of PhD-level skills.
1
1
81
8,693
I'm quite happy to read this. Very promising directions! With the insane frequency of security incidents we're witnessing, I really do hope verification can get ahead of exploitation sooner rather than later.
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
2
3
38
3,037
> “Gang, are you even reading this? be honest.” Honest answer: a language model was, and now so is everyone reading this post. Handwritten prompt injection is now in the autograder’s threat model. -- Amazing write-up by @shrey_twr!
This semester I am TAing 17-313, the undergrad software engineering course at CMU. I built an autograder for the course... with AI writing every line of the code. It got me thinking about what's left of software engineering now that coding is automated away. I jotted down my thoughts here: thelastsoftwareengineer.subs…
1
1
12
856
Rohan Padhye retweeted
found a nasty bug with @AntithesisHQ. if a backup is happening during a leap second then the backup would be done/completed without doing a backup.
8
7
1
58
5,232
Time-Traveling Agents! antithesis.com/blog/2026/tim… The Antithesis Multiverse Debugger is now available via API and CLI :-)
What if saying `claude build me a cloud platform make no mistakes` actually worked??? With the newest Antithesis release we have closed the loop and enabled agents to ship reliable systems: antithesis.com/blog/2026/tim…
1
4
1
38
2,215
Hey it's not just me, TIME magazine says so too.
3
210
Rohan Padhye retweeted
What if saying `claude build me a cloud platform make no mistakes` actually worked??? With the newest Antithesis release we have closed the loop and enabled agents to ship reliable systems: antithesis.com/blog/2026/tim…
5
23
12
158
30,843
This is what I imagine it must feel like for @code_monet every day.
met someone and asked him if he likes claude better and he goes “monet?” wow
4
463
Rohan Padhye retweeted
Hot take: Want to kill paper slop? Brutally cap submissions at 1–3 per author per conference. Force authors to filter their own noise instead of treating peer review like a lottery. Bonus: your best work might again get the attention it deserves.
a "controversial" suggestion for ICML/ICLR/NeurIPS: allow area chairs to desk reject ~50% of their batch! as an area chair, i can very quickly scan all papers in my batch and check which ones have a ~0% chance to get accepted. we shouldn't make reviewers spend time on them!
2
1
4
442
I'm excited for SPLASH/ISSTA 2026 this week! If you wanna know what's cooking at Antithesis and why academia should tune in, I'll be giving a REBASE Industry Track on Wednesday at 1:30pm. "Autonomous Testing with Time-Traveling Agents in a Chaotic Multiverse" Preview:
3
3
32
1,697
Rohan Padhye retweeted
arXiv has updated our policy on rate limiting for all submitters. This update was made to fairly distribute moderator time & support the arXiv community of staff, volunteers, readers & authors. Please read our announcement to learn more: blog.arxiv.org/2026/10/01/up…
79
496
240
1,729
761,166
I'm stoked to author another blog post with @AntithesisHQ ! Distributed Systems + AI + Mutation Testing = Vibes with High Confidence Bonus: 3 serious rqlite bugs that Fable couldn't even...
Mutation testing is a powerful technique that essentially lets you test your testing. Historically, it's been extremely difficult to mutation test test suites for distributed systems -- we've just solved that with a new Antithesis agent skill that creates deep distributed system bugs, then runs them through our bug zapper for you. Read on: antithesis.com/blog/2026/mut…
1
4
43
2,481
Rohan Padhye retweeted
Mutation testing is a powerful technique that essentially lets you test your testing. Historically, it's been extremely difficult to mutation test test suites for distributed systems -- we've just solved that with a new Antithesis agent skill that creates deep distributed system bugs, then runs them through our bug zapper for you. Read on: antithesis.com/blog/2026/mut…
2
7
2
37
5,220
Everyone quoting this post, so here goes me. I'm quite excited for AI + formal methods overall. Folks pointing out that vibe spec'ing is sketchy, but I'm fine if they're made open. Perhaps we need Application Verification Interfaces (AVIs) for agents to inspect claims.
I used Opus 5.5 to formally verify the Claude Agent SDK using Lean. A couple short prompts = 16 PRs fixing various bugs and race conditions. Video attached. TLA+ also works well. I sometimes combine Lean and TLA+ to look for issues around data flow, concurrency, and state mgmt. I don't know either language well, but Claude is excellent at both. This approach is super useful for formally modeling your code and finding bugs that a human probably wouldn't have spotted. Is formal verification the future of coding (or at least, bug finding)?
3
1
27
3,215
Another anecdote. We got *invited* to submit an extended version of a Distinguished (conference) Paper from a April 2025 conference, prepared in 2024. Despite the invitation, it is still under review 1.5 years later, and when it eventually gets published it will be 2+ years old.
Journals today may be rather disorganized. We submitted a paper to a top journal in my field (ACM Transactions on Computer Systems or TOCS) in Jan 27. 8 months passed and it is still "under review." No ETA or any information. Fortunately, @tylergu_jiawei has graduated with a great PhD thesis so the unresponsiveness doesn't matter. I don't want to overly generalize it. But, if students need pubs to convince committees, find a more responsive journal or be aware of the risk.
3
2
15
2,393
I'm grateful to the reviewers for their time---the review quality has generally been quite good thankfully. But I am concerned about the point of going through this exercise given the delta between conducting research and disseminating results.
3
167
many people seem to be upset by >50k submissions to ICLR. i think we should celebrate it! more people are doing AI (including AI safety) research - isn't it amazing? as for how to navigate the growing amount of papers, luckily, Larry Wasserman formulated a solution back in 2012!
26
44
6
363
57,036
This pains me @sigsoft : but it may be time to revert to de-anonymized review. I want to know who's throwing all these papers with AI-written, incomprehensible thickets of words at us. I've got half a mind to decline to review for conferences that don't de-anonymize authors
2
11
1,294