The Ravenscar tasking profile for high integrity real-time programs

The Ravenscar profile defines a simple subset of the tasking features of Ada in order to support efficient, high integrity applications that need to be analysed for their timing properties. This paper describes the Profile and gives the motivations for the features it does (and does not) include. An implementation of the profile is then described in terms of development practice and requirements, run-time characteristics, certification, size, testing and scheduling analysis. Support tools are discussed as are the means by which the timing characteristics of the run-time can be obtained. The important issue of enforcing the restrictions imposed by the Ravenscar profile is also addressed.