A Safety-First Approach to Memory Models.