HiRTOS: A high-integrity multi-core RTOS kernel written in SPARK Ada