AssureLoop is pre-production. Please do not deploy it in safety-critical or security-critical products yet.

For now, open a private maintainer contact channel before publicizing a vulnerability. When the public repository is created, this file should be updated with a dedicated reporting email and GitHub Security Advisories instructions.

No stable versions are supported yet.

The project aims to support:

• signed release manifests,
• firmware signing integration,
• SBOM generation,
• vulnerability response evidence,
• reproducible build metadata,
• traceability between requirements and tests.

Current limitations:

• no formal certification,
• no production key-management process,
• MCUboot integration is scaffolded but not complete,
• no field OTA transport implementation yet.