[baq]

if it's too hard, drop to unsafe - you have the same guarantees as C++ there.

the real problem is telling when it's impossible, e.g. in recurrent data structures, like linked lists and trees. that takes practice.