Sound integer abstraction in nelli's symbolic executor

A symbolic executor has to encode every integer for the solver. Bit-vectors are correct but slow; unbounded integers are fast but unsound. nelli runs on bit-vectors and abstracts to unbounded integers only where it can prove the abstraction is safe.

September 8, 2026 · 6 min · Corey Leavitt