Masten Space Systems is using Ada and Spark to land on the Moon's south pole [pdf]
Ada&#x27;s formal verification capabilities have fallen behind Frama-C for ANSI&#x2F;ISO C.<p>Frama-C allows formal verification of essentially arbitrary heap manipulation algorithms. You can implement linked lists and graphs in traditional C with Frama-C annotations in the comments, then prove your code never dereferences NULL, never has an integer overflow, etc.<p>One single commercial Ada vendor offers Spark, a formally verifiable <i>subset</i> of Ada. Spark does not allow arbitrary dynamically allocated data structures like Frama-C does.<p><a href="https:&#x2F;&#x2F;frama-c.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;frama-c.com&#x2F;</a>