Conversely, the Rustonomicon has this page that says that Rust just uses C++20's memory model for its atomics. Yet I do not believe that memory model is defined anywhere in FLS.
> I think it's important to note, the certification is only for a subset of the run-time, which means some language features will not be available. Also, the certification is only to SIL-2 level, so any projects requiring SIL-3 or 4 will still not be able to use the Ferrocine compiler!
> Why does Linus Torvalds get a pass, even admired, for OPENLY being an extremely vitriolic f*ker, and continuing to be so even after being called out for it to his face in interviews/questions from the audience,
Linux is a major part of the human species' infrastructure. So Linus asking people to put effort into things, and prioritize Linux over themselves to a significant degree, even when the going is hard, is typically reasonable. And he probably gets upset when people are lackadaisical about the process and the effort. If there are fuckups, billions can be affected. That doesn't make any action fine, indeed being gentle can in some cases be the best and most effective and responsible action. But that isn't always the case. Is Linus perfect or optimal? Might a better system exist? Maybe, but there is risk in experimenting. There are other kernels than Linux that can have different processes, and having a diversity of kernels and processes may be good.
What other kernels are there, what processes have they followed, and how have they fared? Windows kernels have done well in terms of usage, but there are a wealth of different reasons for that.