The plan


1. Study source
2. Annotate source with pledge() calls
3. Kernel enforces annotations

Annotations become promises about future behaviour.