Safe and Secure: Ada 2012 https://www.adacore.com/knowledge/technical-papers/safe-and-secure-software-an-invitation-to-ada-2012/ (criticises C, many other languages have adopted some ideas, but the subtyping is elegant)
miniblog.
Related Posts
One subtle behaviour of Claude that wasn't obvious to me: whilst each conversation is transient, permissions persist across conversations.
So if you've given permission to run e.g. 'cargo test' or even 'cargo run', you need to be sure that all future invocations are safe too.
You can see the current permissions with /permissions.
TIL Tcl has a notion of 'safe interpreters', a mode where you can run untrusted code in a sandbox: https://www.tcl.tk/man/tcl8.4/TclCmd/safe.htm
Not many programming languages have this, but it's way safer to include in the implementation than try to build as a userland library.
@skybert@emacs.ch Difftastic has very little unsafe, just the FFI to tree-sitter libraries.
That said, I've actually seen safe Rust segfault in the past!