We've recently started testing C code via Rust QuickCheck. In addition to the relatively clean Rust -> C interface it's very nice to have higher degree of comp

We've recently started testing C code via Rust QuickCheck. In addition to the relatively clean Rust -> C interface it's very nice to have higher degree of compile-time assurance of the correctness of the property model itself. As the models become non-trivial it becomes increasingly difficult to build them reliably in C itself.