Maybe module-private UDAs are usable to implement the base of a management of Tainted Data: http://www.adacore.com/adaanswers/gems/gem-82/ Bye, bearophile