Verified Embedded Real-time Operating System