How do you manage memory allocation in a safety-critical embedded system where dynamic memory allocation (malloc/free) is strictly prohibited?