Use safe pointers in Executive