model-checking/kani

Health v2 · maintenance only

Adoption not part of the score

3342 stars · 168 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Kani is a bit-precise model checker for Rust that formally verifies safety and correctness properties of Rust programs. It uses proof harnesses with nondeterministic inputs to prove properties across all possible values, detecting undefined behavior, panics, and arithmetic overflows, especially in unsafe code.

Use cases

• verify unsafe Rust code for undefined behavior
• prove that a function satisfies a specification for all inputs
• check for arithmetic overflows and panics in Rust code
• formally verify Rust library correctness with proof harnesses
• add formal verification to Rust CI pipelines
• find counterexamples where Rust code violates assertions

When to choose

• you need mathematical proof that Rust code is correct for all inputs, not just tested cases
• you are writing unsafe Rust and want automated undefined-behavior checks
• you want property-based verification stronger than fuzzing or testing
• you want to verify function contracts and assertions exhaustively

When to avoid

• your code relies heavily on concurrency, which Kani does not yet support
• you need fast runtime checks rather than potentially resource-intensive proofs
• your project uses very new Rust features not yet supported by Kani
• you only need simple unit or integration testing

Facets

cli-tool · maturity active

testing fuzzing security developer-tools developer-tools programming-languages testing security rust cli model-checking formal-verification rust-verifier cbmc undefined-behavior-detection proof-harnesses function-contracts linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="model-checking/kani")