Possibly related:
- Pre-RFC: I/O Safety
- Allow safety checks inside unsafe functions
- Language: annotate `unsafe` with invariants? - The Rust Programming Language Forum
- Tracking Issue for "unsafe blocks in unsafe fn" (RFC #2585) · Issue #71668 · rust-lang/rust · GitHub
- The problem of safe FFI bindings in Rust - Abubalay
- Calling from Rust to C++ is not safe · Issue #1 · dtolnay/cxx · GitHub
- Document why from_bits_unchecked is unsafe · Issue #200 · bitflags/bitflags · GitHub