thomas: memory-safety* + assert* + c*