The code was obviously written using LLMs and I don't say this because the code looks like it's been LLM-generated but because of the fact that no sane person would have been able to write such complex piece of software in the pre-AI era. To me personally it shows how things dramatically shifted in software, and how domain expertise along with the AI became not 10x but 100x multiplier.
Insane take
I see no reason why would anyone even bother checking this out, while there a trusted, battle scared, and non vibe-coded alternatives such as postgres, duckdb,boltdb,SQLite.
Sorry mate.
They use TLA+ with TLC which model checks the write ahead log (a component of the system). But that only models the WAL protocol, not the actual Rust code and not the other 99% of the system.
Any formal verification is of course awesome to see though.
But I recently tried having agents try starting with formal models, and then building code using that as basis. In the end to models were never detailed enough to catch the most common issues that were shaken out with getting a high level of coverage and mutation testing.
At which point, the predictive power of the formal models became somewhat vacuous.
I’m trying to be more optimistic that maybe using dependently typed languages will yield better results.