The answer is obviously to have a background task that periodically frees the leaked handles made by a program written in Carbon using a c library.