One of my favorite features in
#RISCOSMerlin, the kernel recovers from when legacy modules fail to initialise. Proper protected calls implementation that give Merlin an impressive level of robusteness even during the delicate phase of system startup.
tinyurl.com/risc-os-merlin
ALT An example of how Merlin's Secure Calls work and recover when a Kernel Module fails to initialise. This allows merlin to survive pretty bad issues durign both system start up or modules loading. There is more about RISC OS Merlin security and resiliance here:
https://paolozaino.wordpress.com/portfolio/merlin-a-modern-memory-safe-kernel-and-platform/