Once you define a safe interface, you only have to audit the implementation of that interface for errors that aren't guarded for in unsafe code. The safe inter

Once you define a safe interface, you only have to audit the implementation of that interface for errors that aren't guarded for in unsafe code. The safe interface you can then use without fearing memory corruption or having to audit that code for unsafety. Any safe code is pretty much only logic errors.