Rule M5-0-4 (required, implementation, automated)

An implicit integral conversion shall not change the signedness of the underlying type.

See MISRA C++ 2008 [7]