fn safe_area(rect: &Rectangle) -> i32
Compute the area, saturating at i32::MAX instead of overflowing.