Depends on #1875. If we have an API to control the behavior of unsafe operators, we can easily implement a lightweight version of DST by having a fuzzer drive those APIs. This does not provide a mechanism for testing global invariants, but can catch panics due to improper assumptions.