Formal design of a real-time operating system kernel by R.M. Tol