# Anthropic open-sources FlashProve, a prototype that proves which model produced a response

> The prototype uses a zero-knowledge proof, and verification needs no GPU. TechCrunch reports there are no plans to deploy it at any lab.

- Publisher: JARRUS (@jarrus.tech), thejarrus.com
- Story date: Nov. 2, 2026 (2026-11-02)
- Published: 2026-11-07
- Tags: Anthropic, Safety and security, Regulation and law
- URL: https://thejarrus.com/en/news/anthropic-flashprove/

On Nov. 2, Anthropic's Frontier Red Team released an open-source prototype called FlashProve. The system aims to let anyone verify cryptographically that a response really came from the stated model. Today a user cannot tell from the output alone whether a cheaper model was substituted or the token stream was tampered with. FlashProve uses a zkSNARK, a zero-knowledge proof: the provider publishes a short commitment to the weights, then proves that each response came from those weights. The proof leaks nothing about the weights, though hiding the architecture was not a goal.

The measurements were made on Llama 4 Maverick, a 400-billion-parameter mixture-of-experts model with about 17 billion parameters active per token, using its public 4-bit weights. On a single H100, proofs are generated at about 110 tokens per second, at roughly 19 MB per 1,024-token request. That works out to **about 70 to 95 times the GPU time** of running the same model on vLLM. Verification is cheap: the client downloads a commitment of about 6.5 MB, and checking a proof takes 17 seconds on 24 threads, with no GPU needed. The repository went up on Oct. 30 under Apache 2.0, and its description says it is not maintained. The post is explicit about limits: the proof covers a model using integer arithmetic and greedy decoding, the system assumes a mixture-of-experts architecture, side-channel attacks are out of scope, and the context is capped at 1,024 tokens for now. According to TechCrunch, there are no plans to deploy the system at Anthropic or any other lab.

https://x.com/AnthropicAI/status/2117710942826123294

Separately, the Nov. 3 entry in the Claude Platform release notes says text generated by Claude Mythos 5, Claude Opus 4.7 and Claude Sonnet 4.6 now carries Anthropic's text watermark. On Sonnet 4.6, output may not carry it when temperature, top_p or top_k is set to a non-default value. Anthropic signed the Code of Practice tied to Article 50(2) of the EU AI Act; the watermark detector remains in private preview, open only to eligible organizations such as regulators, law enforcement, media, fact-checkers and researchers.

## Sources

1. [Anthropic: Progress on provable inference for large language models, Nov. 2, 2026](https://www.anthropic.com/research/provable-inference)
2. [GitHub: anthropics/FlashProve, Oct. 30, 2026](https://github.com/anthropics/FlashProve)
3. [TechCrunch: Anthropic is working on a system to prove AI models’ identity, Nov. 3, 2026](https://techcrunch.com/2026/11/03/anthropic-is-working-on-a-system-to-prove-ai-models-identity/)
4. [Claude Platform: Claude Platform release notes, Nov. 3, 2026](https://platform.claude.com/docs/en/release-notes/overview)
5. [Claude Yardım Merkezi: How Claude marks AI-generated content](https://support.claude.com/en/articles/16266773-how-claude-marks-ai-generated-content)
6. [Anthropic (X): The announcement post: what FlashProve does, its applications and the open-sourcing of the code. 695,389 views., Nov. 3, 2026](https://x.com/AnthropicAI/status/2117710942826123294)

Report an error: corrections@thejarrus.com