How do you ensure memory safety when working with C++ or Rust in a safety-critical context at Capstan Medical?