Update: iddqd is now formally verified*!
* with limitations that are fundamental to this kind of formal verification, making it a complement to the existing layers of validation
For more, see:
oxide.computer/blog/iddqd-u...
rain 🌦️
iddqd, or the hardest kind of unsafe Rust.
My first post for the @oxide.computer blog! Goes deep into the pitfalls of unsafe Rust and how to reason about it. A lot of labor went into the post -- please have a read!
oxide.computer/blog/iddqd-u...
How our Rust collections library defends against adversarial trait implementations.
