How safe is House?

Does the Haskell type system give us what we need?

• The H(ardware) monad interface [1] relies on run-time checks for safety
  • Although safety isn't compromised, bugs can go undetected until run-time.
  • For some things, silent truncation is used, so bugs will result in misbehavior rather than error messages.
• We don't know how to deal safely with DMA.