Safe Abstractions over Unsafe Pointers

Wrap low-level pointer arithmetic in safe Rust interfaces using rigorous abstractions.