Conditions for unsafe code to rely on correctness

ia0:

What matters is not how the verification occurs, but who is responsible for it.

I think the user of unsafe code (the sink) is responsible for verification when the satisfaction of the unsafe code’s safety requirements depends on an upstream crate.