Rust
Memory-safe without a garbage collector. Data-race-free at compile time. The meanest code reviewer you'll ever have — and once it lets you through, your service doesn't wake you up on Sunday.
When we reach for it
- Payment rails & anything touching money or PII
- Hot API gateways with five-nines SLAs
- Low-latency matching engines, trading, realtime
- WebAssembly modules shipped to the browser
- CLI tools & daemons that must start in milliseconds
Trade-offs we won't pretend away
- Ramp-up for new hires: ~2–4 weeks to productive
- Compile times on huge workspaces (we fix w/ sccache)
- Younger ecosystem than Java — mature where it counts