MABELab-RS/UNSAFE_POLICY.md

493 B

Unsafe Code Policy

MabeLabRS is committed to safe Rust. Unsafe is allowed only when:

  • It is proven necessary for performance in critical loops, and
  • There is no safe alternative without excessive overhead, and
  • The code is isolated in a single module with:
    • Comments explaining invariants,
    • Unit tests covering invariants,
    • Reviewed by at least one maintainer.

All unsafe blocks must be justified with a doc comment.

Tools:

  • Run cargo geiger in CI to track unsafe usage.