Makes sense that one of the most safety focused manufacturers would go for it.
Im actually a bit suprised. Getting anything but MISRA C/C++ certified is usually a no-go, but maybe and finally this is an alternative to fucking MISRA.
Certification is already in the works afaik. This [0] is also interesting, a check how much MISRA checking can be removed because the rust compiler already does a similar check.
Ah. Found it, [1][2]
[0] https://github.com/PolySync/misra-rust