Could the effort be bootstrapped by using a C to Rust translator, like https://github.com/immunant/c2rust, preserving the existing semantics prior to updating the code to remove the "unsafe" tags.