Ada
Whatever we might not like about Ada, it can enforce designs that are properly verifiable (as is required in safety critical applications).
As to a truly solid OS, look at the (expensive but does what it says on the tin) Green Hills Integrity OS.