Product Release
Secure by Construction: Production Security That Ships With the OS
Secure boot, dm-verity, LUKS2, signed atomic updates, and a CRA evidence story, all properties of the runtime instead of a hardening phase bolted on...