Rewriting SymCrypt in Rust to modernize Microsoft’s cryptographic library

Conformance checking at MongoDB: Testing that our code matches our TLA+ specs

Proving completeness of an eventually perfect failure detector in Lean4

Telescopes Are Tries: A Dependent Type Shellac on SQLite

StarMalloc: verified memory allocator

AI is a gamechanger for TLA+ users

NVIDIA ISO-26262 SPARK Process

What works (and doesn't) selling formal methods

The current state of TLA⁺ development

A Lean companion to Analysis I