Another Safety OS

PXROS

A task-based operating system makes it easier to structure software since it modularises the components of the application. In this context, a task is an independent main-loop which is activated by the operating system via events or messages. The philosophy of PXROS supports strict encapsulation of parts of the application (tasks), allowing a simplified certification of the overall system. In doing so, standard components such as RAM/ROM tests and CPU tests for safety-critical applications have already been certified with SIL-4 as a so-called toolbox for PXROS. For creating safety-critical applications via the toolbox, a designer is available within Eclipse.
PXROS is a multitasking operating system for hard realtime. Its basic component is a microkernel with only 7 - 20 kb of code. PXROS manages several independent parts of the application, called tasks, which can be executed in a quasi-parallel fashion on the microcontroller. The processing of the tasks is controlled by assigning priorities and exchanging messages and events. Due to this event-controlled method of operation, PXROS does not need a hardware timer. Events are used exclusively for signalling. They do not contain any data and thus do not tie up resources.

德国一家公司的产品，居然也声称SIL-4认证了，估计是最近刚刚拿到的认证。