Amutable Foundations: Verifiable integrity for Linux infrastructure

Verifiable integrity for Linux infrastructure, from build to runtime.

A minimal, immutable, image-based Linux system and the tooling around it, designed to cryptographically prove what is running on your infrastructure, not just assume or scan for it.

Hermetic, reproducible builds with full provenance.

Every component and image is built in a hermetic, pinned environment and comes out bit-for-bit reproducible, signed, and ready for standard SBOM tooling and security scanners.

A minimal, image-based Linux system that starts verified.

A read-only, image-based operating system. Signed unified kernel images and dm-verity protected volumes mean the system only runs what was built and signed for it.

Signed, need-to-know updates built on TUF.

Updates are distributed as signed static content using The Update Framework. Each machine gets its own repository, so it only ever learns about the artifacts meant for it.

Hardware-rooted proof of what is running.

Trust is rooted in hardware. Nodes report signed measurements of their state, backed by the TPM or confidential computing, so you can verify what is running on your fleet at any time.

We are opening Amutable Foundations to a small group of design partners. Tell us about your infrastructure and we will be in touch.