Review all potential panics in the entire codebase.

[boocmp]

Review all potential panics.
Rewrite the code to return errors wherever it makes sense.
Comment on all cases where the panicking code is safe and explain why.

Cases:

1. expect or unwrap called in function returning a Result

[bridiver]

I think this should follow the same rules as https://chromium.googlesource.com/chromium/src/+/HEAD/styleguide/c++/checks.md
where panic would be equivalent to CHECK

we can also expose DumpWithoutCrashing to rust

[boocmp]

Sounds like a good idea