Rust Model-checking Resources