Why is EROS reliable?
Once again, the answer to this question is involved. A more complete answer can be found in one of the EROS white papers here. EROS is reliable for basically the same reasons it is secure. Each EROS component can be built to do exactly what it should and no more. This makes the components testable. At the same time, EROS components live inside a protection boundary. This means that when they do go wrong it is much harder for them to corrupt other components and much easier to determine where the error really occurred.