Safety-certified real-time operating systems (RTOS) for autonomous systems technology and investment research

Technical bottleneck

• Bottleneck type: Safety certification / Ecosystem lock-in
• Technical constraint: Microkernel (QNX, INTEGRITY, PikeOS) must guarantee <5 μs worst-case interrupt latency and <10 μs context switch time on ARM Cortex-A72 class processors; spatial partitioning (MMU-based) ensures a fault in the infotainment VM cannot corrupt the safety VM — this is virtualization with hard isolation; temporal partitioning (ARINC 653 time slots, QNX Adaptive Partitioning) guarantees CPU time to the safety partition regardless of other VM load — unbounded priority inversion is a certification fail
• Economic constraint: BlackBerry QNX dominates automotive (200M+ vehicles) with >30 years of RTOS heritage; Green Hills INTEGRITY dominates aerospace/defense (F-35, B-2, Airbus A380); Wind River VxWorks (Aptiv) is strong in aerospace and industrial; safety-certified RTOS creates vendor lock-in — once certified on a specific RTOS version, the cost to switch is prohibitive

Adoption

• Driver: L3+ autonomous driving domain controllers requiring ASIL D RTOS; eVTOL type certification programs requiring DO-178C DAL A; robotic surgery platforms requiring ISO 62304 Class C software; defense autonomy programs requiring DO-178C for UAS airworthiness
• Blocker: Linux with PREEMPT_RT and safety extensions (ELISA project) attempting to compete with RTOS; AUTOSAR Adaptive (POSIX-based) capturing automotive middleware — RTOS may become a thin hypervisor layer; open-source seL4 microkernel (formally verified) challenging commercial RTOS in research/defense

Public companies exposed

BB (BlackBerry — QNX RTOS

dominant in automotive)

APTV (Aptiv — Wind River VxWorks)

GHS (Green Hills Software — INTEGRITY RTOS

private)

SYNA (Synaptics — no

not RTOS)

SYS (no)

Siemens (embedded Linux

not safety RTOS)

MRVL (Marvell — automotive processors running QNX/VxWorks

not the RTOS itself)

Validation signals

QNX design wins on L3+ autonomous driving platforms; eVTOL certification program selecting specific RTOS; QNX royalty revenue growth >10% (BB earnings); INTEGRITY-178B/TU RNP certification on new defense platforms

Invalidation signals

Linux PREEMPT_RT achieving ISO 26262 ASIL B certification and capturing mid-tier automotive; AUTOSAR Adaptive reducing need for separate RTOS in automotive; open-source seL4 formally verified and adopted by defense primes