A method of implementing safety mechanisms in a safety-critical system, the method comprising: receiving, at a safety mechanism configured to provide a first level of safety, a message or command from a calling process operating at second level of safety, the first level of safety having more restrictive requirements than the second level of safety; and initiating by the safety mechanism, a resultant process based on the message or command, the resultant process configured to operate at the first level of safety.