|
| 1 | +# 2025 Late Year Global Virtual Meetup \- Day 1 \- 2025-10-14 @ Oct 14, 2025 9:00 AM |
| 2 | + |
| 3 | +| Search Key | Description | |
| 4 | +| :---- | :---- | |
| 5 | +| \[todo\] | Action Item | |
| 6 | +| \[decision\] | Something decided on | |
| 7 | +| \[important\] | Key information | |
| 8 | + |
| 9 | +## Agenda |
| 10 | + |
| 11 | +| Time | Topic | Person | Slide | |
| 12 | +| :---- | :---- | :---- | :---- | |
| 13 | +| 9:05 AM EDT \- 9:15 AM EDT | Agenda introduction for day 1 and 2 | Pete LeVasseur | 3 | |
| 14 | +| 9:15 AM EDT \- 10:00 AM EDT | Retrospective, reaffirming our values, RFC process | Joel & Pete | 5 | |
| 15 | +| 10:00 AM EDT- 10:15 AM EDT | FLS Team | Pete LeVasseur | 28 | |
| 16 | +| 10:15 AM EDT \- 10:30 AM EDT | Break time | | 30 | |
| 17 | +| 10:30 AM EDT \- 11:00 AM EDT | Funding of in-person events and swag expenses | Pete LeVasseur | 31 | |
| 18 | +| 11:00 AM EDT \- 11:20 AM EDT | Liaison Subcommittee | Alex Celeste | 37 | |
| 19 | +| 11:20 AM EDT \- 11:40 AM EDT | Tooling Subcommittee | Alexandru Radovici | 43 | |
| 20 | +| 11:40 AM EDT \- 11:55 AM EDT | Coding Guidelines Subcommittee | Pete LeVasseur | xx | |
| 21 | +| 11:55 AM EDT \- 12:00 PM EDT | Meeting close | Pete LeVasseur | xx | |
| 22 | + |
| 23 | +## Pete needs to have alternative emails added for the following |
| 24 | + |
| 25 | +* Tshepang (have the email, need to add to the Consortium mailing list) |
| 26 | +* Tiago |
| 27 | +* David Wood (*usual.salt4489@fuligin.ink* is the email I use for Google, already on mailing list) |
| 28 | +* Julius (have the email, need to add to Consortium mailing list) |
| 29 | +* Gideon (have the email, need to add to to the Consortium mailing list) |
| 30 | +* Satoshi Kaneko |
| 31 | +* Markus Hosch (markus.hosch@gmx.net) |
| 32 | +* Christof Petig (I registered [christof.petig@aptiv.com](mailto:christof.petig@aptiv.com) and use my @[gmail.com](http://gmail.com) address for google login, [Issue \#480](https://github.com/rustfoundation/safety-critical-rust-consortium/issues/480)) |
| 33 | + |
| 34 | +## Items for open discussion tomorrow |
| 35 | + |
| 36 | +* |
| 37 | + |
| 38 | +## Check-in area |
| 39 | + |
| 40 | +**Please add your name, and an emoji that describes your day.** |
| 41 | + |
| 42 | +* Pete LeVasseur 🦀💬 |
| 43 | +* David Svoboda ;} |
| 44 | +* Daniel Szucs 🚀 |
| 45 | +* Florian Gilcher 😃👷 |
| 46 | +* Alex Celeste ☕ |
| 47 | +* Félix Fischer ☕ |
| 48 | +* Tshepang 😶 |
| 49 | +* Tiago Manczak ☕ |
| 50 | +* Tony Aiello 😀 |
| 51 | +* William Barsse |
| 52 | +* Samuel Wright 🌞 |
| 53 | +* David Wood 🦀 |
| 54 | +* Alexandru Radovici 😀 |
| 55 | +* Oreste Bernardi⛰️ |
| 56 | +* Christof Petig ⌚ |
| 57 | +* Manuel Hatzl 🍕 |
| 58 | +* Julius Gustavsson 🙂 |
| 59 | +* Rinat Shigapov 👶 |
| 60 | +* Mikhail Antoshkin 🦀 |
| 61 | +* Satoshi Kaneko 🙂 |
| 62 | +* Daniel Krippner 👍 |
| 63 | +* Joel Marcey 🥱 |
| 64 | +* Gideon Mueller |
| 65 | +* John Vishnefske 🚀 |
| 66 | +* Max Jacinto 🍀 |
| 67 | +* Robert C. Seacord 😵💫 |
| 68 | +* Markus Hosch 👾 |
| 69 | +* Xander Cesari 🤒 |
| 70 | + |
| 71 | +**Notetaker (before break):** |
| 72 | + |
| 73 | +* David Svoboda |
| 74 | + |
| 75 | +**Notetaker (after break):** |
| 76 | + |
| 77 | +* Félix Fischer |
| 78 | + |
| 79 | +## Meeting Minutes |
| 80 | + |
| 81 | +* Introduction of participants, review of the agenda: today’s meeting is more report-oriented with detail for tomorrow |
| 82 | + * Day 2’s agenda has intentional open spaces to fill in as matters arise |
| 83 | +* Retrospective, reaffirming our values, RFC process |
| 84 | + * Q: What do we mean by 'non-differentiating portions of the ecosystem"? |
| 85 | + * A: If you have a closed-source ecosystem independent of Rust, the differentiating piece (for different languages). Non-differentiating pieces aren't specific to Rust. Rust prefers non-differentiating features that help multiple languages, not just Rust. |
| 86 | + * We have a community grants program, for providing resources for people to do work. Also the [Rust Innovation Lab](https://rustfoundation.org/rust-innovation-lab/), which can support/fund projects. Also directed funding for specific things. |
| 87 | + * Q: By "values", you refer to 'technical values" right? |
| 88 | + * A: Right. These are not binding but are things we would like to see to help Rust succeed. |
| 89 | + * Concern that splitting the team between contributors and observers will be too simplistic. |
| 90 | + * Anyone can submit a coding guidelines issue. As part of the team, you are doing something, perhaps triaging pull requests. Contributors may have a rotation of reviews for guidelines. |
| 91 | + * [PR 149](https://github.com/rustfoundation/safety-critical-rust-coding-guidelines/pull/149) has a [diagram](https://github.com/rustfoundation/safety-critical-rust-coding-guidelines/blob/d20616f257e0f30271e95409e1acaf14cb30c0b4/CONTRIBUTING.md#diagram-for-contribution-workflow) for contributing to coding guidelines. (It hasn't been merged yet). |
| 92 | + * Perhaps this already exists: We might need a "0th RFC" that writes down how things work at the moment. Ground truth for current processes. |
| 93 | +* FLS Team |
| 94 | + * Q: What does "non-binding but normative" mean regarding FLS and the Rust compiler? |
| 95 | + * A: The Rust reference is the way the compiler should work, but the canonical implementation may have bugs. There is a reconciliation process between compiler reference and FLS. Someday the docs will be in agreement, perhaps unified, and the compiler will comply. |
| 96 | + * If something in the spec is unsound or incorrect, the FLS conclusions will eventually direct behavior of the compiler, as opposed to the compiler directing the FLS. |
| 97 | + * Q: There exists a document that describes behavior of safety-critical software. Who is right? |
| 98 | + * A: This is still an active area in the Rust Specification Team. Maybe the Rust reference should be more nightly (e.g. what is available in nightly builds), and serve the needs of folks more broadly using Rust. And the FLS evolves into a snapshot of the compiler behavior at a stable release. This seems to be the direction of the specification team. |
| 99 | + * We need a 'correct' spec that describes behavior of the compiler with each release. The Rust compiler has a nightly version and \~4000 RFC's. Many are rejected. The spec is an attempt to figure out the RFC's that are adopted. All behavior is covered by tests. |
| 100 | + * Some RFC's have only been partially implemented, such as the const generics RFC ([2000](https://github.com/rust-lang/rust/issues/44580)). Very hard to complete. |
| 101 | +* (break) |
| 102 | +* 2026 Rust All-Hands |
| 103 | + * Our Q2 event for next year? |
| 104 | + * Q: Regarding funding for attending the meetups: is there any chance for partial support between the different organizations (eg the Rust Foundation and another org splitting the cost of funding, etc) |
| 105 | + * A1: there has been talks regarding this, nothing very concrete. Preliminary conversations point to it being a bit of a hassle. But again, nothing concrete yet. |
| 106 | + * Bonus: The Foundation is wondering whether there is a fairer way to fund these things / a better model. |
| 107 | + * A2 (from another contributor): what is working currently is that their organization pays for it |
| 108 | + * A3 (another contributor): ISO doesn’t provide its committees with any funding, but it helps them with infrastructure |
| 109 | + * A4 (idem): “we currently latch on to Rust conferences to do our meetups (see: All-Hands in Utrecht in May 2025)”. This helps because it spreads the fixed costs of travel between multiple activities. On the other hand, the Rust conferences don’t have a consistent / established cadence or schedule, so it’s a bit inconsistent for now in that format. |
| 110 | +* Swag Expenses |
| 111 | + * How to make them sustainable? |
| 112 | + * A1: we’ve shared the designs (in our other committee), in a way such that you can upload designs to a sticker printer, and if anyone wants to get some, they can |
| 113 | + * A2: reimbursing the costs with your company is usually a waste of labor \- it’s best to just fund swag in some other way |
| 114 | + * A3: manufacturing stickers and such is almost pure fixed cost \- making them en masse is way cheaper per sticker. |
| 115 | + * Bonus A: “making the assets available is an instant win without any drawbacks” 🙂 |
| 116 | +* Liaison Subcommittee |
| 117 | + * Expert Sessions |
| 118 | + * 40-50 attendants for Jill Britton’s talk |
| 119 | + * Folks seem to know the basics of the pipeline now, that’s great\! |
| 120 | + * [Final minutes here](https://github.com/rustfoundation/safety-critical-rust-consortium/blob/main/subcommittee/liaison/meetings/2025-10-02/minutes.md) |
| 121 | + * Requests |
| 122 | + * For a talk on the role of a lang standard or spec in certified development |
| 123 | + * Tentative: |
| 124 | + * Software “quality” metrics? |
| 125 | + * Integration of adopted code? |
| 126 | + * **If you have questions**: |
| 127 | + * DM Alex Celeste on Zulip or email or Github. |
| 128 | + * Raising questions in a public space is better \- that’s preferred since different folks might have the same questions |
| 129 | + * ISO WG23 |
| 130 | + * The WG has agreed to start work on a Rust base document |
| 131 | + * The WG doesn’t feel like they have any fluent enough Rust experts. |
| 132 | + * **Call is out for experts from our group\!** |
| 133 | + * Alex currently has 1-2 volunteers from the Rust SC committee. |
| 134 | + * Getting to about 4-5 would be a good amount. |
| 135 | + The more the merrier, though\! |
| 136 | + * **We may want a new SC subcommittee** |
| 137 | + * Concerns were raised w.r.t. making such a subcommittee: it was done (sort of) for C and the C folks mostly quit it. Yet the WG found someone who wanted to work on it and it’s... currently a bit awkward. |
| 138 | + * Or perhaps a sub sub committee owned by the Guidelines subcommittee |
| 139 | + * Do not fret: the WG does not require an ISO standard to exist for the languages they work in (their Python work stands as precedent) |
| 140 | + * MISRA |
| 141 | + * Still considering a publication in this space |
| 142 | + * WG21 / C++ |
| 143 | + * Continues to collaborate w.r.t. C++’s ABI |
| 144 | + * Interop with this ABI is not trivial |
| 145 | + * The work is centered around the [Rust-C++ Interoperability Initiative](https://rustfoundation.org/interop-initiative) |
| 146 | + * Work is nascent for now. |
| 147 | +* Tooling Subcommittee |
| 148 | + * Goal: figure out what tools exist today, and how to push the ecosystem further |
| 149 | + * Split in two task forces: |
| 150 | + * Rust Project Bridge: |
| 151 | + * Facilitate connection to the Rust Project |
| 152 | + * Raise awareness |
| 153 | + * Tool review: |
| 154 | + * Review tools and compile a list of tools |
| 155 | + * Actions: |
| 156 | + * Manual on how to contribute to the Rust Project |
| 157 | + * Identify and Monitor features that the SC community requires |
| 158 | + * Talk to the Rust Project about SC and the overlap between SC needs and the Rust Compiler |
| 159 | + * Folks raising their hand: |
| 160 | + * David Wood offers their help from the Rust Project side |
| 161 | + * It was suggested that a concrete priority list of specific Safety Critical features should be provided to the Rust Project. |
| 162 | + * There seems to be a lot of overlap between the Rust Project’s goals and the SC goals. A “bridge” of sorts is being constructed |
| 163 | + * Tool Review |
| 164 | + * In the next Subcommittee meeting, the list of submitted tools will be reviewed and a preliminary list will be published |
| 165 | + * For the beginning, the bar needs to be low. |
| 166 | + * The criteria will evolve from this and is expected to become concrete and more strict over time. |
| 167 | + * Relevant PR: [\#463](https://github.com/rustfoundation/safety-critical-rust-consortium/pull/463) |
| 168 | +* Coding Guidelines Subcommittee |
| 169 | + * Foundations: |
| 170 | + * Subset v/s Defects |
| 171 | + * Categorization, e.g. Mandatory v/s Required |
| 172 | + * Infrastructure Setup |
| 173 | + * Many important bits have been configured |
| 174 | + * A few loose ends yet to figure out before soliciting wider contributions |
| 175 | + * Multiple examples per guideline, |
| 176 | + * CI/CD work to help review and testing of e.g. code snippets |
| 177 | + * Generation of Sphinx source from Guideline Issues still has a few rough edges |
| 178 | + * Tentative Roadmap |
| 179 | + * v0.1.0 |
| 180 | + * (Porting subsets of) |
| 181 | + * CERT C |
| 182 | + * MISRA C |
| 183 | + * Finding useable lints from Clippy and the Compiler for our use-cases |
| 184 | + * Finding out what SC rules they map to |
| 185 | + * **Subset out** unaddressed language constructs |
| 186 | + * Final audit |
| 187 | + * (Not present in the diagram draft yet\!) |
| 188 | + * Producers take “status-draft” guidelines and graduate them to “status-approved” guidelines |
| 189 | + * Important criteria: |
| 190 | + * **Incompleteness is fine** |
| 191 | + * **It’s best to be “correct”** (read: logically consistent). Any set of guidelines, as long as it is correct, is good. |
| 192 | + * Completeness is a good thing, but it’s completely secondary when compared to correctness |
| 193 | + * v0.2.0 |
| 194 | + * A few (say, 10-15) guidelines per chapter |
| 195 | + * Subset out unaddressed language constructs |
| 196 | + * Final audit: same as v0.1.0 |
| 197 | + * v0.3.0 |
| 198 | + * Thorough review by producers and observers (as desired) |
| 199 | + * Request for comment from entire Consortium membership |
| 200 | + * Final audit: same as v0.1.0 |
| 201 | + * v1.0.0 |
| 202 | + * Tracing to individual industry safety-critical standards per guideline |
| 203 | + * An audience member advised against this due to historical experience with C safety-critical standards |
| 204 | + * Receive 3+ reports of the coding guidelines having been used in SC products or projects |
| 205 | + * Producers and Observers |
| 206 | + * We want to make expectations clearer of what each role means and what rights and responsibilities everyone has. |
| 207 | + * Defining e.g. reviewer rotation |
| 208 | + * Not effective immediately but it’s on the horizon |
| 209 | + * Expect this to go into effect sometime late this year or early 2026 |
| 210 | + |
0 commit comments