
Le marteau-pilon, forges et aciéries de Saint-Chamond, Joseph-Fortuné LAYRAUD, 1889
Creusot is a deductive verifier for Rust code. It verifies your code is safe from panics, overflows, and assertion failures. By adding annotations you can take it further and verify your code does the correct thing.
Creusot works by translating Rust code to Coma, an intermediate verification language of the Why3 Platform. Users can then leverage the full power of Why3 to (semi)-automatically discharge the verification conditions!
See ARCHITECTURE.md for technical details.
If you need help using Creusot or would like to discuss, you can post on the discussions forum or join our Zulip chat!
If you would like to cite Creusot in academic contexts, we encourage you to use our ICFEM'22 publication.
To get an idea of what verifying a program with Creusot looks like, we encourage you to take a look at some of our test suite:
More examples are found in examples and tests/should_succeed.
rustup, to get the suitable Rust toolchainopam, the package manager for OCamlcreusot directory.
sh
git clone https://github.com/creusot-rs/creusot
cd creusotsh
./INSTALLsh
cargo creusot --helpSee the Creusot guide: Installation for more details.
sh
git pullsh
opam updatesh
./INSTALLSee CONTRIBUTING.md for information on the developer workflow for hacking on the Creusot codebase.
$ claude mcp add creusot \
-- python -m otcore.mcp_server <graph>