This is really cool! Having verification and Hoare logic as first-class language features seems like a better approach than trying to verify a language that was

This is really cool! Having verification and Hoare logic as first-class language features seems like a better approach than trying to verify a language that wasn't built to be verified (like what sel4 is doing with C).