Each type in arvo carries a single guarantee: if it exists, it is valid. Construction always goes through ::new() returning Result — invalid states become unrepresentable at the type level. No more ...