Verus proves Rust correct for all inputs. Code review still can't define "correct."

Amazon shipped a blog post on Verus, their Rust verifier used in Firecracker and AWS Lambda. Verus doesn't review your code. It proves it: annotated functions get checked against a mathematical spec for every possible input, mechanically, no model in the loop. Correctness stops being a judgment call and becomes a pass/fail. I keep coming back to... Weiterlesen