Hacker GitHub

← All repos

model-checking/kani

View on GitHub ↗ ★ 3,628 Rust

A model checker for Rust programs.

18 mentions on Hacker News by 15 people: 2 stories, 16 comments · first 2022-03-26 · latest 2026-09-17

Mentions per year 18 mentions · busiest year 2024 (6)
20082026
  1. …them so I'll refrain from trying to differentiate them. [0] https://github.com/rust-lang/miri [1] https://github.com/model-checking/kani [2] https://github.com/creusot-rs/creusot
  2. ▲ 3
    Kani Rust Verifier
    story by lwhsiao · 2026-09-15 · 0 comments
  3. …source code. A couple of examples, in a rough order of approachability by a working programmer: https://github.com/model-checking/kani https://github.com/flux-rs/flux https://github.com/viperproject/prusti-dev https://creusot.rs/ I really…
  4. …converts the Rust code and C code into a GOTO program[1] which verifiers can then run on top of [0] https://github.com/model-checking/kani [1] https://model-checking.github.io/cbmc-training/cbmc/overview...
  5. …If you want to check out what all the verification look like, you can see them here[1] [0] https://github.com/model-checking/kani [1] https://github.com/malisper/pgrust/tree/main/proofs
  6. …), as long as you don't accidentally need e.g. randomness for HashMap DoS protection ( https://github.com/model-checking/kani/issues/2423#issuecomm... ). Loops are an utter pain to prove with Kani, though:…
    comment by yencabulator · 2025-06-03 · in What works (and doesn't) selling formal methods
  7. …All in all, it seems to me like Rust supports a wide variety of use cases pretty nicely. [0]: https://github.com/model-checking/kani
  8. I researched and discovered kani https://github.com/model-checking/kani , it's pretty cool. ```rust #[kani::proof] fn main() { let mut array: [i32; 10] = kani::any(); array.sort_unstable(); let index: usize = kani::any_where(|i| *i > 0 &&…
  9. …but some context: > I'm not aware of one for rust, but there is a lot of progress in this area https://github.com/model-checking/kani is probably the best known one, I believe there are a few others. > (I'm not sure what rust allows,…
  10. does Kani count? https://github.com/model-checking/kani
    comment by drdrey · 2024-08-27 · in KLEE Symbolic Execution Engine
  11. …subset of Rust. If that manages to get to you all the way to the end result, then there was no gap. https://github.com/model-checking/kani http://prusti.org/
    comment by yencabulator · 2024-06-24 · in Formal methods: Just good engineering practice?
  12. ▲ 1
    Kani: A bit-precise model checker for Rust
    story by nequo · 2024-06-14 · 0 comments
  13. Is there any relationship between this and Kani[1]? Do they work differently? [1] https://github.com/model-checking/kani
    comment by TachyonicBytes · 2024-05-04 · in Verified Rust for low-level systems code
  14. …is far from the speed and robustness of the C front end. [1] https://github.com/diffblue/cbmc [2] https://github.com/model-checking/kani
    comment by animatethrow · 2024-03-28 · in Xr0 Makes C Safer than Rust
  15. This is also the backend for Kani - Amazon's formal verification tool for Rust. https://github.com/model-checking/kani
  16. …seems like the best route. I feel like Rust leans into this paradigm with `unsafe` blocks. [1] - https://github.com/model-checking/kani
    comment by bennettnate5 · 2023-09-12 · in Chrome: Heap buffer overflow in WebP
  17. …search space if possible. [0]: https://medium.com/@carlmkadie/check-ai-generated-code-perfe... [1]: https://github.com/model-checking/kani
    comment by rocho · 2023-06-15 · in This Week in Rust 499
  18. …to this. Various sources point to rmc as https://github.com/model-checking/rmc (redirected to https://github.com/model-checking/kani ) and https://model-checking.github.io/rmc/ (404). Anyone knows why?