Trusted Manifesto

[Meta via Digitalmars-d]

On Monday, 9 February 2015 at 12:02:12 UTC, John Colvin wrote:
> On Monday, 9 February 2015 at 11:47:03 UTC, Meta wrote:
>> On Monday, 9 February 2015 at 11:43:00 UTC, Walter Bright 
>> wrote:
>>> On 2/9/2015 2:54 AM, John Colvin wrote:
>>>> It seems to me that rules 2 and 3 could be helped along by 
>>>> tooling (compiler or
>>>> external).
>>>
>>> Sounds good, but I'd like to see how this works in practice 
>>> before going further with it. The nice thing about this 
>>> proposal is it involves no language changes. It'll allow us 
>>> to gain experience before committing to language changes.
>>
>> On the topic of safety, I seem to remember that bounds 
>> checking is disabled in @trusted code is this true? If so, can 
>> we change that? I think it should only be disabled in @system 
>> code, if at all.
>
> bounds checking *can be* disabled in @trusted and @system code, 
> by choice of compiler flags. It can even be disabled in @safe 
> as well, with -boundscheck=off.
>
> It might be nice to have a -boundscheck=trusted option.
>
> pragma(boundscheck, true/false) would also be nice for 
> functions.

Yes, but is it disabled by default in @trusted code? That's what 
would be nice to change.