// Invariants for the `unsafe-maybe-uninit` backend:
// - `0 <= len <= N` always holds.
// - Elements in `buf[..len]` are initialized `T` values.
// - Elements in `buf[len..N]` are logically uninitialized and must never be
// read as `T`.
// - All public methods maintain these invariants.