hn.today

Introducing Amutable Foundations

amutable.com14 points1 comments
Screenshot of Introducing Amutable Foundations

Amutable Foundations is a Linux-based platform that makes every machine, software image, and configuration provable through hardware-backed attestation. Intended-state declarations live in version control and the build system turns those declarations into signed, reproducible images (with SBOMs) for both OS and configuration. Machines boot only signed artifacts, measure firmware/bootloader/kernel/OS and configuration into a TPM or CPU attestation, and report their measured state with signatures. Each machine gets a dedicated repository that gates which releases and configs it can see; updates swap atomically with fallbacks, and there is no package manager, SSH, or ad hoc on-host changes - everything changes only by providing a new signed image.

Identity and access are derived from what a machine proves it is running rather than from copyable secrets or network metadata. The control plane verifies signed machine reports against expected measurements and enforces policy: cluster joins, secret issuance, and workload permissions depend on proven state. This prevents configuration drift, simplifies cryptographically verifiable audits, and ties compliance and reliability to hardware-rooted evidence. Amutable is recruiting design partners for a private preview, plans to extend the approach to Kubernetes, and frames this work as timely given regulatory pressure (e.g., EU Cyber Resilience Act) and risks around AI workloads on untrusted hosts.

Read on amutable.com1 comments on Hacker News

Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.

More in Security

The daily digest

Today's best Hacker News stories, summarized and screenshotted, one email a day.