How does Rust handle safe abstraction over unsafe code in std library?

The standard library wraps unsafe code inside safe abstractions with enforced invariants.

Types like Vec, Box, and Arc internally use unsafe memory operations, but expose safe APIs. The safety contract relies on invariants maintained by implementation, ensuring users cannot violate memory rules.