A safe implemented using BDD