En-50128 certification-oriented design of a safety-critical hard real-Time kernel