Safety profile checks need semantic information about containers
engineeringcppsafetyprofilescontractsP3543R0 separates language subsets from runtime instrumentation and automatic source changes. Its container examples explain why a size member and a subscript operator cannot establish a universal bounds rule.