Source ↗
Security infrastructure

fortis.
Verifiable boot chains for embedded systems.

Chain-of-trust attestation for embedded systems. Rust on RISC-V — built for boot chains where every stage can prove what ran before it.

RustRISC-VEmbeddedMIT
View source ↗ Releases Full catalog
git clone https://github.com/Hartwell-Labs/fortis

Engineering, not promises.

Every capability below ships in the open-source core — MIT licensed, CI on every push.

Chain-of-trust

Each boot stage measures and attests the next — a compromise anywhere breaks the chain visibly.

RISC-V native

Targeting the open ISA where embedded vendors actually need attestation, without license traps.

Rust for firmware

Memory safety in the layer where a single overflow historically meant total compromise.

Attestation, not assumptions

Remote verifiers receive evidence about the boot state — trust is computed, not presumed.

Embedded footprint

Built for constrained devices: the attestation story does not require a full OS.

Open source

MIT licensed, source-first, CI on every push.