Which is why in aerospace and safety critical systems, RTOSes are used and not fully fledged OSes.
Also, redundant hardware is quite common (and mandatory by most standards), look up TMR, triple modular redundancy
Also, redundant hardware is quite common (and mandatory by most standards), look up TMR, triple modular redundancy
The idea that "RTOS" and "fully fledged OS" are incompatible with each other is outdated.
seL4 advanced the state of the art with its formally-verified support for mixed criticality, years ago already.
(But seriously, it’s a homegrown microkernel RTOS. Look up “Nintendo Switch System Software” if that sounds bizarre.)