Function pump_events 

pub fn pump_events()

Dispatch queued native events (see [pump_events_inner]), CONTAINING any panic. Native event callbacks reach Day through extern "C" signal trampolines (GTK’s value_changed_trampoline, Qt’s event filters, …) that ABORT the process on unwind (panic_cannot_unwind). A panic in a Day event handler or its reactive drain — e.g. the reactive-cycle assertion firing during a slider drag — would therefore SIGABRT the whole app instead of surfacing. Catch it at this single backend-agnostic boundary, log it (the message carries the offending effect’s source location), and reset the runtime so the app keeps running (degraded) rather than crashing.