Explicitly declare the API contract of `mtl` to be "safe"