[PRE-RFC] Granular Unsafe Blocks - A more explicit and auditable approach

[scottmcm]

This has come up a bazillion times. How is this different from, say, [Pre-RFC] Single function call `unsafe` - #16 by scottmcm ?

I continue to think that smaller unsafe scopes is just a workaround, and we should fix it with a better system instead. See this sketch:

Pre-RFC: Unsafe reasons

TBH, I think needing them in the middle of the call like that will defacto result in people being unwilling to actually list out the reasons in nice separable ways, because it'll just be so ugly to see them all through the middle of the logic. I do like the direction of having to meet all the requirements -- not just the ones you remembered -- but think it should work differently so while you still need to cover them, you don't need to repeat them endlessly. For example, I think of code like …