Anthropic is working on a system to prove AI models’ identity
Called FlashProve, the system would let anyone check that an AI response really came from the model it claims to be from.
Buy One Founder Summit Ticket, Get a Second for Free. Register now.
Founder Summit begins Nov. 4, 9:00 a.m. ET. Get your pass savings & deals before it starts. REGISTER HERE.
TechCrunch Desktop Logo TechCrunch Mobile Logo Latest Startups Venture Apple Security AI Apps Disrupt 2026 Events Podcasts Newsletters Search Submit Site Search Toggle Mega Menu Toggle Topics Latest
Anthropic is working on a system to prove AI models’ identity Russell Brandom 2:41 PM PST · November 3, 2026 Anthropic is working on an open-source system to verify which AI model produced a given output, according to a blog post published Tuesday. The system, called FlashProve, is built to provide what researchers call “provable inference” – a cryptographic proof, essentially a mathematical guarantee, that a given output came from a specific model. It’s meant to let users confirm that the answer they received really came from the model they think they’re using.
Similar to cryptographic email signatures that let recipients confirm a message really came from its claimed sender, FlashProve would be robust against impostors attempting to disguise one model as another, even when the impostor is the lab that built and runs the model. In particular, the researchers note that the system could be used to prevent an AI company from secretly swapping in a cheaper model to cut costs, or a more expensive model to inflate its performance results.
FlashProve could also be used to verify claims by third parties that a specific task was done by an advanced model. “A developer might claim that their software library was scanned for vulnerabilities by a frontier cybersecurity model, or a company might claim that its business plan was given the go-ahead by an appropriate model,” the researchers write. “How can a user verify these claims?”
To work, the system requires AI labs to publish a “fingerprint” of each model they release that can later be matched to specific outputs and verified cryptographically. Crucially, the fingerprints don’t reveal a model’s weights, the internal numbers that define how it behaves and which closed-model makers like Anthropic and OpenAI keep private. That means labs could publish the fingerprints without giving up their most valuable asset, enabling the system to work with commercial models, too. The system is also designed to be lightweight, so verification could be performed on a local device.
As part of the announcement, researchers released a detailed technical specification and working code for various elements of the system, which is publicly available under an open-source license on GitHub. Research in the system is ongoing, and there are no plans to deploy it at Anthropic or any other lab.
“This research post is meant to share intermediate progress, and not a completed research agenda,” researchers explain in the announcement post. “We are sharing this explicitly with the goal that others look at what we have done, take it, and improve it.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
November 4 Boston Buy One Pass, Get a Second Free Cover more ground at TechCrunch’s ultimate founder bootcamp of the year by bringing your co-founder or partner for free Book before the BOGO deal expires
Anthropic warns that it’s very close to RSI capability, aka self-building AI Julie Bort
New York Times and other outlets sue web browser Brave over alleged content scraping Rebecca Bellan
Anthropic expected to receive high ‘junk’ rating from credit agencies following IPO, FT report says Lucas Ropek
Google’s first data center satellite is online and writing poetry Tim Fernholz
Binance pauses withdrawals as hackers suspected of stealing billions in crypto Zack Whittaker
As search traffic dries up, Reddit announces it’s shifting to a logged-in experience Sarah Perez
AI execs may be too out of touch to build for the general public Amanda Silberling
X LinkedIn Facebook Instagram youTube Mastodon Threads Bluesky TechCrunch Staff Contact Us Advertise Site Map Terms of Service Privacy Policy RSS Terms of Use Code of Conduct Voice AI Anthropic Flock Startup Battlefield Disrupt 2026 Tech Layoffs ChatGPT © 2026 TechCrunch Media LLC.