Black box abstractions that allocate memory are a problem. Presently, if you want to prove you will not run out of memory, you do it by not allocating memory o

Black box abstractions that allocate memory are a problem. Presently, if you want to prove you will not run out of memory, you do it by not allocating memory or using a special purpose allocator.