That's very possible. It could be any RTOS with a good security track-record in industry, from OKL4 to INTEGRITY-178B. There's also a number of groups doing R&D on Assured Real-Time OS's so it could be that. That we still don't know and RTOS security is so hard bothers me about this.