The correctness of the Cargo implementation has been
validated by model checking. First investigations confirm
the correctness of enqueue() [13]. The following
subsections discuss the proposed interrupt synchronization
mechanism in terms of overhead and real-time behavior.