Verus proves Rust correct for all inputs. Code review still can't define "correct."

· Dev.to