Any reason why you don't use clang's `-fbounds-safety`? It offers ABI compatibility and incremental adoption. The author of Fil-C worked on it also :-)

https://clang.llvm.org/docs/BoundsSafety.html#overview

That is a great feature

But it’s strictly less safe than either Fil-C or Rust since it only protects bounds