@wim_v12e @dekkzz76 the types that tripped me the most were routines that passed items through the return stack, and the ones that don't return.

I had this one super weird routine in drifblim that could BRK in a special case, which I had to refactor because it was just too hard to validate: git.sr.ht/~rabbits/drifblim/co

For anything that does a jump to a dynamic value(LDA2 JSR2), I had to flag as unsafe.