Achieving Safety Incrementally with Checked C