Comment by smaudet

How about no infinite loops (as a start)?

Unless you are the kernel, and you can demonstrate that your loop is "safe" via some set of static analysis.