'safe submodule with contracts