EROS

Extremely Reliable Operating System, is a small, secure (capability-based), real-time OS that provides orthogonal persistence.

Note that there is an homonym, amatorial, unrelated OS:

This page is linked from: Apostle Capability coyotos KeyKOS