The more limitations you're willing to impose on the applications, the easier it is to make precise and strict behaviour promises in the O/S: > The kernel's de

The more limitations you're willing to impose on the applications, the easier it is to make precise and strict behaviour promises in the O/S: > The kernel's design guarantees bounded computation times by eliminating features such as dynamic memory allocation. It's no surprise that Green Hill is going for embedded security device market now. Once you have the robust partitioning required for avionics it's mostly a matter of documenting how the same features allow for security...