To achieve FACE conformance, a safety-critical embedded operating system must provide a combination of features historically found in certified ARINC 653 OSs, as well as POSIX APIs found in real-time OSs.