B bloomberg.github.io Extracting verified C++ from the Rocq theorem prover at Bloomberg 129 points clarus 9 months ago 39 comments