Answers are grounded in this paper and cite their sources.
The GNAT light runtime library is a version of the runtime library targeted at embedded platforms and certification, which has been certified for use at the highest levels of criticality in several industrial domains. It contains around 180 units focused mostly on I/O, numerics, text manipulation, memory operations. We have used SPARK to prove the correctness of 40 of them: that the code is free of runtime errors, and that it satisfies its functional specifications.
No takes yet. Share an insight, caveat, or question.
Moy et al. (2022) studied this question.
Synapse has enriched 10 related papers. Consider them for comparative context: