PaxPilot - The Operating System for High-Trust Transport