Trusted Manifesto

[John Colvin via Digitalmars-d]

On Monday, 9 February 2015 at 11:47:03 UTC, Meta wrote:
> On Monday, 9 February 2015 at 11:43:00 UTC, Walter Bright wrote:
>> On 2/9/2015 2:54 AM, John Colvin wrote:
>>> It seems to me that rules 2 and 3 could be helped along by 
>>> tooling (compiler or
>>> external).
>>
>> Sounds good, but I'd like to see how this works in practice 
>> before going further with it. The nice thing about this 
>> proposal is it involves no language changes. It'll allow us to 
>> gain experience before committing to language changes.
>
> On the topic of safety, I seem to remember that bounds checking 
> is disabled in @trusted code is this true? If so, can we change 
> that? I think it should only be disabled in @system code, if at 
> all.

bounds checking *can be* disabled in @trusted and @system code, 
by choice of compiler flags. It can even be disabled in @safe as 
well, with -boundscheck=off.

It might be nice to have a -boundscheck=trusted option.

pragma(boundscheck, true/false) would also be nice for functions.