Attribution

The Parsimoni Platform integrates these open-source projects:

Solo5: sandboxed execution environment and tenders (hvt, spt) for unikernel workloads.
MirageOS: OCaml unikernel framework.
Unikraft: POSIX-compatible unikernel framework for C, C++, and Rust.
runc: OCI container runtime, used both as the container isolation backend and as the sandbox for build steps.
libcrux: formally verified cryptographic primitives.
Linux: the dom0 control-plane kernel, built from LinuxKit kernel packaging.

The Platform implements two security standards frameworks: The Update Framework (TUF) security model for launch trust, and COSE (RFC 9052) for signed metadata. Both are memory-safe OCaml implementations.

Design lineage

Several systems shaped the architecture without their code being embedded:

LinuxKit: the minimal-init, OCI-image composition model. Space CLI realizes it natively in OCaml with its own image assembler; no Docker daemon is involved.
OBuilder: the content-addressed, runc-sandboxed build-step model behind the in-VM build engine.
Albatross: the unikernel supervision model the SpaceOS runner, log, and metrics agents follow.
Dagger: the unified service model (build steps and services as one concept) and the two-layer content-addressed build cache.

The Parsimoni contribution is the partition and composition model, the memory-safe CCSDS and DTN protocol stack, the offline TUF launch-attestation layer, and the Docker-free system image builder.

License

The manual content (every page on this site) is licensed under the Creative Commons Attribution-NoDerivatives 4.0 International License: reproduce and share it verbatim with attribution to Parsimoni. The site source is licensed under the MIT License.