I don't know enough about formal verification (or even if that's the right term), but do you guys see Rust making it relatively easy to verify that a program does what is supposed to do and only that? In time, does Rust have the potential to bring an even higher degree of program soundness than just memory and thread safety?