The Successful Design of Safety-Critical Systems Is Difficult Demands Significant Attention to Detail. Fortunately, an Operating System's Emphasis on Protection Resource Guarantees Can Make the Job of Application Developers Less Arduous