ARINC 653
The aviation standard for letting several programs of different safety levels share one computer without being able to disturb each other.
Published in 1996, it goes hand in hand with integrated modular avionics (IMA), in which a handful of powerful computers replaced hundreds of dedicated boxes. Both the Boeing 787 and the Airbus A380 are built on the idea. That only works if a crash in the cabin entertainment logger cannot drag anything more important down with it.
ARINC 653 demands two kinds of isolation. Spatial: each partition gets its own memory, enforced by the MMU. Temporal: a fixed schedule, the major frame, decides in advance exactly how many milliseconds each partition receives, no matter what the others are doing. Applications talk to the system through the APEX API. VxWorks 653, INTEGRITY-178 and PikeOS all implement it.