include/string_checked.h (3 lines):
	- line 8: // TODO: revise string types after support for pointers to             //
	- line 11: // TODO: Better Support for _FORTIFY_SOURCE > 0                        //
	- line 111: // TODO: we have no way to express the bounds requirement on dest,


include/stdlib_checked.h (3 lines):
	- line 72: // TODO: express alignment constraints once where clauses have been added.
	- line 86: // TODO: compar needs to have an itype that has bounds
	- line 97: // TODO: compar needs to have an itype that has bounds


include/stdio_checked.h (2 lines):
	- line 8: // TODO: Better Support for _FORTIFY_SOURCE > 0                        //
	- line 61: // TODO: printing and scanning functions are still mostly


include/_builtin_string_checked.h (1 line):
	- line 62: // TODO: we have no way to express the bounds requirement on dest,


spec/bounds_safety/checking-variable-bounds.tex (1 line):
	- line 378: % TODO: we can now introduce a temporary for the result of the function call, so this