To be honest, Rust is a pretty clear example of why formal specifications are worth less than they first seem to be! I'm glad people are working on one, but Rust has been successful at its goals without them. The fundamental soundness of its mechanics is pretty clear to anyone who has written production code in it, even though there are edge cases that need nailing down.