How safe is House?
Does the Haskell type system give us what we need?
- The H(ardware) monad interface  relies on
run-time checks for safety
- Although safety isn't compromised, bugs can go undetected until
- For some things, silent truncation is used, so bugs will
result in misbehavior rather than error messages.
- We don't know how to deal safely with DMA.