A concurrency model with shared mutable state, purely user-space mutexes and no deadlocks