Could you not enforce that functions tagged can only call other functions with the tag and must not call panic?
This would not protect against stack overflow or similar environmental panics.
This would not protect against stack overflow or similar environmental panics.