Ferrocene, safety-critical Rust toolchain