Currently planning to call `rust-verifier` as a command, but it may be a bottleneck. We should use FFI or something more lightweight than now.