Mununu, an RTL proof-and-controller tool

Field notes

The page describes a Rust engine that represents reactive systems as Compositional Labeled Transition Systems and evaluates temporal properties, including branching-time recovery questions. Its worked example names OpenTitan's csrng_main_sm RTL and shows AG EF idle changing from proved to violated when the escalation input is free; the silicon demonstration is a claim made by the site.