Formal Real-Time Scheduler