Function split_at_boundary_safe 

pub fn split_at_boundary_safe(s: &str, mid: usize) -> (&str, &str)

Boundary-safe version of s.split_at(mid). mid is rounded DOWN to the nearest char boundary so the left side never exceeds mid bytes.