I vaguely remember that there is a new language that promises "Safety across FFI boundary", but can't recall the name