[p_l]

Maybe something like Ada with SPARK, or at least partially transactional memory to make some types "atomic" in behaviour.

But that would make it way harder to add to systems it's already running on.