Please show us how. I don't think these can be achieved within current C semantics.

In full anyway. Limited subsets? Sure, if you assign a null and immediately try to deref' it Clang and GCC will probably notice and yell at you.

Well, no. You’re talking about using all the flags and tooling like i just mentioned, which 99.99% of people don’t use every time they run a build. Even then the best and strictest of flags + Werror still falls short.

Then you still have to run extensive fuzzing and testing to trigger different paths and whatnot.

Or you could just use Rust.