Whenever invariants can be expressed as proofs rather than as tests that may or may not be exhaustive, the mathematical guarantees of model checkers will provide stronger assurances the code is correct.| Colin Breck
GWP-ASan finds rare memory errors in C and C++ called from Rust.| Colin Breck
