Blog
Three series, one rule: every article contains at least one element you can verify in the public repository (test, measurement, code, document). Engineering articles are published in English; the full series is available in French.
Step-by-step tutorial to replay the OC2-Edge demo on an emulator: Secure Boot with OVMF, swtpm software TPM, signed UKI image, fault injection without cascade, A/B update with rollback, and the COP in a browser.
9 min read //
OC2-Edge supervision is a pure state machine with injected time. Chaos tests run 1,000 crash cycles per night, with a negative control, to prove that onion-layered isolation confines every failure.
6 min read //
OC2-Edge addresses the harvest now, decrypt later threat without a fleet-wide cutover: three self-described signature suites, a hybrid X25519MLKEM768 KEM on the mesh and a post-quantum requirement policy hardened node by node.
7 min read //
Two independent builds of the same revision produce bit-for-bit identical artifacts, compared in CI. The article details what must be pinned, the audit artifacts produced by every build and the link with accreditation.
6 min read //
First episode of the Jetson campaign log: zero hardware commitment doctrine, NVIDIA Jetson Orin bench, staged protocol. No silicon results to date: the results section is published empty.
7 min read //
OC2-Edge will be compared to the k3s + Zarf stack on six tactical metrics. This article preregisters the full protocol before any measurement: metrics, conditions, publication rules. It contains no results.
7 min read //