Verifying RTuinOS using VCC: From approach to practice | IEEE Conference Publication | IEEE Xplore