I'm not a developer on it, but I've been following the development pretty closely for a while. IIRC, the lead developer Jeremy Soller states that even though th

I'm not a developer on it, but I've been following the development pretty closely for a while. IIRC, the lead developer Jeremy Soller states that even though the kernel code does require unsafe blocks, it's actually less common than you might think. I can't find the source, but for some reason I have it in my head that the percent of Redox kernel code that is unsafe sits at somewhere around 30%, which especially considering the actual LoC of the microkernel vs. a monolith, means much easier code coverage. Again, the exact number might be wrong, but I do know that the kernel is significantly less that 100% unsafe code.