High integrity computing is full of pain staking processes, exactly because no one trusts C developers to do the right thing.