I like your random byte on start-up concept btw.<p>For the truly paranoid, the compiler must be re-written so that bits within the stack words must remain unutilized and the remaining bits include a cryptographically-signed bit field.   E.g.  a 32-bit machine can allocate 8 bits of each word for application data and 24 bits for authentication.