Also helps to see a counterexample. Oberon report is a good one where everything is laid out in clean, neat detail: https://www.inf.ethz.ch/personal/wirth/Ober

Also helps to see a counterexample. Oberon report is a good one where everything is laid out in clean, neat detail: https://www.inf.ethz.ch/personal/wirth/Oberon/Oberon.Report.pdf https://www.inf.ethz.ch/personal/wirth/Oberon/Oberon.Report.... They also make it memory-safe & type-safe by design so any undefined behavior should happen in SYSTEM/UNSAFE modules hidden behind interfaces that you know to check.