A convincing answer doesn’t reveal which model generated it.
Anthropic published FlashProve research on November 2. The research post describes a cryptographic approach to proving that an output came from a specified set of model weights without revealing those weights.
A provider commits before a verifier checks
The proposed workflow has three roles. A provider commits to model weights, generates a proof for an output, and lets a verifier examine that proof. This could make a claim about model provenance more inspectable than judging an answer’s writing style.
Anthropic released code, documentation, and formal proofs under Apache 2.0. The public repository calls the release a research artifact and states that it is not maintained or accepting contributions.
Model identity and answer accuracy are different properties
Imagine a routing service that promises model A. A provenance check concerns whether the specified computation used the committed model. It does not determine whether that model answered a tax question correctly or followed a customer’s instructions.
For an application, that separates three records: which model was used, whether the requested computation was verified, and whether the answer passed the application’s own checks. Passing one record should not silently mark the others as successful.
The published performance has narrow conditions
Anthropic’s measurements concern a quantized Llama 4 Maverick setup, an NVIDIA H100 and a 1,024-token context. Its reported proof-generation performance has substantial GPU-time overhead compared with ordinary vLLM inference.
Those conditions matter when reading a throughput figure. Prefill work, proof generation, and normal answer generation are different measurements. A speed stated for one should not become an application-wide response-speed claim.
We have not run the prover, checked a proof, or independently validated the cryptographic protocol. The authors’ formal statements and engineering measurements remain the evidence to inspect, rather than a production guarantee from MustHave.ai.
A new research artifact, not a Claude account feature
This release does not mean ordinary Claude responses now arrive with a production provenance proof. It offers an inspectable research implementation and a defined set of claims.
My first question for a future integration is exactly what the accepted proof binds: the weights, the input, and the computation it specifies. An application still needs its own evidence for the answer’s content.
Read the technical report and repository documentation for the full conditions. Which would you need to establish first in your workflow: the model’s identity or the answer’s correctness?



