kani — Bit-Precise Rust Model Checker | Open Awesome