The 11-year-old premise inside Rust's memory-safety proof

"If it compiles, the memory is safe" — a machine-checked proof, Level 2 enforced by the compiler itself. Yesterday an 11-year-old hole appeared in it, and the team's severity call exposed the premise the proof rests on: Drop impls are honest. Verified live on stable and nightly.