Okay, so I just finished skimming the new Claw whitepaper that dropped last week. Everyone in the crypto threads is talking about it like it's a huge deal, and I feel like I'm missing something.
The technical sections are *intense*. I mean, pages and pages of mathematical proofs, formal security models, and notations I don't recognize. They've proven its security under this "adaptive chosen-ciphertext attack" model, which sounds impressive... but then I got to the end and realized there's nothing about how it actually performs in the wild. No case studies, no data on attempted breaches, not even a simulation against known attack vectors from the last couple years.
It reminds me of when I was picking a Shopify app for fraud detection. One vendor had a beautiful, complex whitepaper full of logic, and another just showed me a dashboard with real blocked fraud attempts and the money saved. I went with the dashboard. 😅
So my maybe-naive question is: how much weight should we put on pure mathematical proof versus real-world testing? For those of you who understand the math better than I do, is the proof considered enough? Or should a whitepaper for something this important also include some adversarial simulation data? It just feels a bit like building a fortress based on perfect blueprints but never stress-testing the walls.