Against migrating反驳「迁移」
PASSEnd-to-end reach端到端影响 — The report claims class elimination only inside the selected backend and states the 176,402 lines it does not reach.报告只在所选后端内部主张消除该类问题,并写明了它够不到的那 176,402 行。
PASSAttribution归因 — No performance benefit is claimed for any Rust option, so no redesign effect can be miscredited to the language.没有为任何 Rust 方案主张性能收益,所以不会把重新设计的效果记到语言头上。
HITBaseline and regime基线与口径 — The size of the safety win rests on structural exposure, because curl's advisories are not classified by root cause in-repo.安全收益的大小只能靠结构性暴露面来估,因为仓库内没有按根因分类的公告数据。
PASSBoundary and compatibility边界与兼容 — The seam is an existing internal abstraction with six implementations; no ABI or protocol change is required.接缝是一个已有的内部抽象,带 16 个实现;不需要改 ABI,也不需要改协议。
PASSDelivery ownership交付归属 — The path requires two named reviewers before any widening, which is the specific resource whose absence ended the hyper attempt.路径要求任何拓宽之前先配齐两名具名评审者,也就是 hyper 当年缺的那项资源。
Against staying反驳「不动」
PASSFunded counterfactual有资金的反事实对照 — Continuous fuzzing and review are funded, running, and credited in the ledger rather than dismissed.持续 fuzzing 和评审有资金、在运行,账本里给了它们应有的位置,没有一笔带过。
HITCost of inaction不动的代价 — Staying entirely in C keeps the memory-unsafety class reachable in every line that touches network input.完全留在 C,意味着每一行接触网络输入的代码里,内存不安全这类问题都还可达。
PASSUnsafe-surface omission回避不安全面 — The report names the unsafe surface explicitly instead of hiding it behind the project's good security record.报告明确点出了不安全面,没有拿项目良好的安全记录把它遮过去。
PASSNative-advantage denial否认原生优势 — The Rust backends already in the tree are recorded as an ecosystem advantage, not dismissed as hype.树里已有的 Rust 后端被当作一项生态优势记录在案,没有被当成炒作打发掉。
PASSStop condition停止条件 — Widening is gated on a published root-cause table and two committed reviewers, so 'harden C forever' is not the default answer.拓宽的前置条件是公布根因表,加两名承诺到位的评审者,所以「永远加固 C」不是默认答案。