Jul 9, 2026 AutoVerus turns 40 hours of proof writing into 3 LLM calls. The trick is knowing when to give up. AutoVerus uses a network of LLM agents to generate Verus correctness proofs for Rust code, automating over 90% of proof obligations through a... model-checkingautoverusrustverification
Jul 8, 2026 LLMs can generate Rust code. Formal proofs are a different problem entirely. Large language models write surprisingly good Rust, but when you ask them for a formal proof they hallucinate invariants and invent syntax that no verifier... model-checkingllmrustformal-proofs
Jul 5, 2026 You can prove Rust code correct without writing a single proof, but the state space is the bill Model checking tools like Kani let you verify Rust properties with assertions instead of formal proofs. model-checkingrustverificationformal-methods
Jun 26, 2026 Your dependencies can read any file on disk. cap-std makes them ask permission. Rust's standard library grants ambient filesystem authority to every dependency. capability-based-securityrustcap-stdsandboxing
Jun 22, 2026 Stop Throwing Errors Your Type Checker Can't See Thrown exceptions hide failure paths from your type system. type-level-correctnesserror-handlingtypescriptrust
Jun 21, 2026 Rust newtypes make wrong states unrepresentable at compile time, for free A single-field wrapper struct catches unit-mixing bugs and type confusion without adding a single byte of overhead. type-level-correctnessrustnewtypeszero-cost-abstractions
May 28, 2026 Mutation Testing in Rust Works, but Your Compile Times Will Hate You cargo-mutants finds the tests that only pretend to verify your code. deep-divesmutation-testingrustcargo-mutantstest-quality
May 23, 2026 Property-Based Tests in Rust Find the Bugs Your Unit Tests Miss Example-based testing only covers the inputs you thought of. deep-divesrustproperty-based-testingquickcheckproptest
May 21, 2026 Rust Runtime Contracts Can Be Free in Release Builds, but the Compiler Won't Do It for You Rust strips debug assertions automatically, but real design-by-contract needs more than debug_assert!. deep-divesrustruntime-contractsperformance
