subtype Safe_Float is Float range Float'Range;