This issue raises SIGFPE. Ada would raise Constraint_error, which is easier to catch than a signal, but still occurs at runtime.

You need range proofs to be 100% safe, and then you can as well use the regular type because invalid values will not occur.

Or Liquid Haskell.