c-safety

Writing C that does not have a CVE in it. Memory safety, the undefined behaviour a modern optimiser will exploit, the standard-library functions whose signatures lie about what they do, integer promotion and overflow, and the build flags and sanitizers that catch what review misses.