It's beyond me why such foundational libraries don't have formal correctness proofs attached these days.