How do you manage memory allocation in a safety-critical, real-time system where dynamic allocation is prohibited?