kayleee·4 年前·議論Rust does not have a formally verified compiler - while C does. So if you want mathematically proven correct code, use C.