Developing provably correct Rust code with Verus | TickerVault