[klodolph]

> However, you have the benefit of being able to narrow your search scope to the parts of your code marked `unsafe` instead of the entire project.

I may be missing some context, but this is certainly not true in Rust. In order to understand whether an individual piece of code marked `unsafe` is actually correct, you need to examine the context in which it is run and in general you could have to examine a large section of "safe" code in order to figure out whether the "unsafe" block is correct. Usually you will have to examine the entire module.

[steveklabnik]

Yes, it's limited to the module. That's still limited, and a good reason to keep such modules small.