Rust primitive that permits mutation through shared references when unsafe code upholds aliasing and data-race rules.