Formalizing Rust traits