This would make security auditing tremendously simpler. The basic idea is optional annotations for a maximum length on strings, vectors, and buffers. We should also be able to specify an optional max and min for any numeric values.

These constraints would then be enforced by mojo at the marshalling level, probably on both ends in debug builds and on the receiving end only in release builds.