At this point you pretty much want an alternative language more than a compiler: one that looks like C, but is completely defined. And this makes kinda sense, yet is IMO still quite dangerous (less than the actual situation but still too much)<p>1&#x2F; There are tons of people who will say: &quot;this project is written in C&quot; instead of the reality that is that this project is written in boringC, (actually probably even most of the projects authors will) and will for ex. compile with a regular C compiler instead of a boringC one, maybe for performance improvement...<p>2&#x2F; You just can&#x27;t take C, even with a completely defined semantics, and call it a day for secure programming. It would still be filled with crazy features that are intrinsically impossible to render secure (everything about C &quot;arrays&quot; comes to mind)<p>So let&#x27;s take this idea to its real destination and rewrite secure projects using a really secure programming language, instead of just extending the current mess for 30 more years.