01CompCert and the Verified Compiler: Proving the Translator CorrectCompCert used Coq to prove semantic preservation across a realistic optimizing C compiler, closing the assurance gap between verified source programs and generated assembly.↗