{
  "slug": "verus",
  "name": "Verus",
  "tagline": "SMT-based verifier for Rust",
  "maintainer": "CMU, Microsoft and community",
  "url": "https://github.com/verus-lang/verus",
  "repo": "https://github.com/verus-lang/verus",
  "category": "implementations",
  "targets": [
    "Rust (systems and some cryptographic code)"
  ],
  "approach": "Ghost specifications and SMT-discharged proofs in Rust itself",
  "license": "Open source (MIT)",
  "status": "Active",
  "summary": "Verus lets developers write specifications and proofs inside Rust and discharges them with an SMT solver, giving full functional correctness without a separate proof assistant.",
  "details": [
    "Verus is strongest on systems code; cryptographic use is growing. It is an option for teams that want proofs in the same language as the implementation."
  ],
  "strengths": [
    "Specs and code in one language.",
    "High automation.",
    "Active community."
  ],
  "limits": [
    "SMT limits on nonlinear field arithmetic.",
    "Requires writing Verus-flavoured Rust.",
    "Less cryptographic precedent than hax."
  ],
  "fit": [
    "Consider Verus for new Rust components where the team wants in-language verification."
  ],
  "references": [
    [
      "Verus repository",
      "https://github.com/verus-lang/verus"
    ]
  ],
  "category_name": "Verified implementations",
  "page": "https://sorryfree.com/frameworks/verus/",
  "updated": "2026-09-13"
}