roadmap

building verifiable security without single points of failure

Most systems today still rely on single individuals or computers, unverifiable software, and opaque processes. We’re redesigning security from the ground up.

View roadmap

creating the building blocks for provable security

Modern software systems still rely on trust in individuals—maintainers, IT admins, or third-party providers. But what happens when they are compromised? How do you verify that the software running on your systems hasn’t been tampered with?

We’ve identified critical missing pieces needed to remove single points of failure at every level. Our approach starts with how source code is managed, how software is built, and the environments in which it runs.

By combining quorums, applied cryptography, and bit-for-bit reproducibility, we are methodically eliminating trust assumptions, ensuring security isn’t just a claim—it’s provable.

See what we're building →

SourceId

backlog

Problem statement

How does one verify that they are building from the source code they intend? What if someone tampered with code that goes into a .tar archive, or pre-compiled a blob of code and included it in the source code (ref to xz backdoor)

Solution

Standardize code to remove all version control system specific items, leaving only functionality related code and produce a hash based on the tree of all necessary files.

Learn more

SigRev

backlog

Problem statement

There is a lot of code to review, so instead of manually reviewing all code, we rely on static analysis tools which are prone to missing novel exploits.

Solution

Create a crowdsourcing framework which makes it easy to publish signed review of code

Learn more

StageX

ready

Problem statement

How does one solve the "Reflections on Trusting Trust" (ref) problem?

Solution

Bootstrap a compiler in a detrministic manner, then use that compiler to build all packages, reproduce the work on different systems, and cryptoraphically sign resulting hashes.

Learn more

ReprOS

in-progress

Problem statement

How does one create a maximally isolated environment that's ephermeral and allows easy reproduction of software?

Solution

Create a bare-bones uni-kernel operating system which spins up a new VM for each build, and discards everything afterwards

Learn more

Keyfork

ready

Problem statement

Managing cryptographic material can be unwieldy and TODO

Solution

Create a tool for using a single source of entropy to derive all cryptographic algorithms required

Learn more

Icepick

ready

Problem statement

How does one perform cryptographic operations in an agnostic fashion while preserving memory boundaries?

Solution

A framework for rapidly developing applications to perform transfer and staking cryptocurrency operations.

Learn more

AirgapOS

ready

Problem statement

How does one minimize the surface area for attacks when performing operations in an air-gapped setting?

Solution

A minimal deterministic unikernel Linux distribution designed for managing secrets offline.

Learn more

Bootproof

backlog

Problem statement

It's difficult to prove that server is running software it claims to

Solution

Leverage TPM2 to cryptoraphically attest to software that's running on a server

Learn more

EnclaveOS

in-progress

Problem statement

Creating immutable, deterministic images for use in secure enclaves is challenging

Solution

A minimal, immutable, and deterministic Linux unikernel build system targeting various Trusted Execution Environments for use cases that require high security and accountability.

Learn more

❝Our mission is to use our knowledge to bring open source solutions to the world that improve the security, privacy and freedom of as many individuals as possible. We believe having verifiable foundations that technologies can be built upon are a fundamental step towards improving the well being of our species, and solving the coordination problem.❞

powered by distrust

Companies are already choosing to adopt our methodologies to help secure their systems.

Turnkey

Using StageX and ReprOS to improve their supply chain security story.

Mysten Labs

The SUI cryptocurrency is leveraging StageX to build their nodes in a deterministic manner in order to eliminate single points of failure.

Sidero

Using StageX to build their widely used Linux distribution specialized in delivering kubernetes features

ready to take your security to the next level?

Work with us