
IronProof: proofs about the machine code, not the source
IronProof proves properties of the assembly rustc emits and the PTX our inference engine sends to the GPU: constant time, memory bounds, exact outputs, race freedom. It has proved 335 of 342 obligations across IronCrypto, and it found a real out-of-bounds GPU write that no test would ever have hit.
















