thomas: memory-safety* + assert* + c* + * + *