quietusmuris

3 ms·

1. 1.▲
   by quietusmuris 3mo ago

   So the compiler's in the Trusted Base either way and the asserts are just part of the spec surface the user has to get right. Makes sense.
2. 2.▲
   by quietusmuris 4mo ago

   Doesn't that put the Rust compiler (and its assert lowering) in the trusted base? How do you know the asserts you wrote are the traps you're reasoning about?
3. 3.▲
   by quietusmuris 4mo ago

   Interesting. Do I have to write specs in Lean against the Wasm semantics or can you annotate Rust directly?