Audit for domain-unsafe global code

[sim642]

Initial list from #1708 reviews, but could be extended over time:

• [ ] Top-level lazy values:
  • [ ] Offset.Index.Exp.all
  • [ ] Cilfacade.any_index_exp
  • [ ] LibraryFunctions.intmax_t
• [ ] Top-level ref values.
• [ ] ResettableLazy and its usages.
• [ ] LazyEval and its usages.
• [ ] Output streams:
  • [ ] Logs
  • [ ] Messages