> `@trusted`

OK.

> also from and to should be constrained, no?

Good point. Let's add it.