What safe Rust guarantees, what counts as undefined behavior, and how to catch it.
What `unsafe` unlocks, what it doesn't, and what I owe the compiler when I use it.