On Thursday, 17 November 2016 at 17:27:01 UTC, Stefan Koch wrote: > It allows encapsulating unsafe operations in safely-callable > wrappers. So is this a limitation in Rust? If so, could you give a more concrete D code example that cannot be implemented with only two safety levels?