creusot

What problem does it solve?

Creusot provides formal verification for Rust by enabling contracts, invariants, and Pearlite specifications so that quality-critical code can be proven correct rather than relied on tests alone.

Core Features & Use Cases

• Annotation-based verification: use #[requires], #[ensures], #[invariant], #[variant], and Pearlite to specify and prove function contracts.
• Loop reasoning: express loop invariants and termination measures to verify iterative algorithms.
• End-to-end verification workflow: integrate with cargo creusot to generate Why3/Coma models and discharge proof obligations.

Quick Start

Annotate your Rust function with Creusot contracts and run cargo creusot prove to verify the function.