Extra-lingual static analysis tools are OK at finding bugs. They&#x27;re not good at proving the absence of whole classes of bugs; that is what we should be striving for, and what Rust and other languages can provide.<p>So what I&#x27;m looking for from Herb Sutter is not just a set of good guidelines and tools to check for them, but also a proof --- or at least an argument --- that if the tool finds no errors in a piece of code then that code <i>cannot</i> be the source of memory safety bugs.