> enabling reasoning about program validity locally About certain few properties only. It is impossible in the general case. I agree regarding “change anxiety

> enabling reasoning about program validity locally About certain few properties only. It is impossible in the general case. I agree regarding “change anxiety” compared to dynamic languages, but that’s just static typing. Due to lifetime annotations leaking into API boundaries, the rest is not true though.