The Central Guardian Approach to Enforce Fault Isolation in the Time-Triggered Architecture