The System-Level Simplex Architecture for Improved Real-Time Embedded System Safety