Verus is an open-source, automated program verifier for Rust that mechanically checks code against a formal mathematical specification for all possible inputs. Amazon used it to prove correctness of Nitro Isolation Engine primitives.
- Verus is an open-source, automated program verifier for Rust that mechanically checks code against a formal mathematical specification for all possible inputs. Amazon used it to prove correctness of Nitro Isolation Engine primitives.
spec is still a trap
the proof only says the code matches the spec, so the whole thing rests on the spec being what you actually wanted. it pays off where the spec is way shorter than the code, which is what isolation primitives are. gets a lot worse the further up you go
that's the power of verifying assumptions about code correctness through math instead of testing every edge case. if more projects used this approach, we'd see fewer bugs and a ton less stress for founders trying to scale.