Salt: Systems programming, mathematically verified