Code using unsafe might be safe, it just can't be proved to be safe by the compiler. Just as code written in C might be safe, it just can't be proved to be saf

Code using unsafe might be safe, it just can't be proved to be safe by the compiler. Just as code written in C might be safe, it just can't be proved to be safe by the compiler! Rust's advantage over C is that the machine-unprovability is confined to small, defined zones, where hopefully human programmers can, formally or informally, prove the code safe.