[tuukkah]

Seems easy and clear: they introduce a keyword "fip" that you use to mark a function as being fully in-place, and they statically check it.