Safety Through Abstraction
Safety = maintaining invariants...
Invariants can only guaranteed for programs written above certain abstraction levels.
Most code should be written on top of the safe abstractions, obviously!