Andrei: > C's restricts sets a poor example.
There are infinite things that a compiler can't prove about the code. Example: the type system can't prove that @system code that uses pointer arithmetic contains no bugs, pointers that go past arrays, etc. C99 restrict is just another example where the language doesn't require a correctness proof, and relies on the programmer. Allowing a "@restrict" attribute in D2 @system code is an option. Bye, bearophile