1.
AI- . - .
Copilot, Claude, GPT - .
PKI- TRNG, MCU- ARM64.
. TODO-. ,
- , .
. .
- . 200K ,
, , ,
. , .
:
: 50- 10-
: = ,
: - ӣ
. - . 420+ ,
, .
- - , AI . "
X" -> -> -> ( ) -> .
. TRNG, MCU-,
SELinux- FIPS- - . AI
. AI .
: - -> -> ->
. .
2. :
RAG-: vector DB, embedding-, chunking,
retrieval tuning, GPU. .
0.agent readFile:
RAG pipeline -> 0.agent:
Vector search -> ROUTE_CACHE.json (650 , 3% )
RAG retrieval -> CONTEXT_LEVEL_1/2/3 (200/700/2000 )
Fine-tuning -> + ( )
Evaluation pipeline -> drift_check.py (84 , 0 )
: $ + DevOps -> + git
. : readFile , vector search
- . , -
, . . RAG - .
: - . Markdown - . Git -
. . Redis
, PostgreSQL , S3 . ӣ
- git.
:
- JSON-, 3% 19%
- L1/L2/L3, 8
- : analyst , coder - , tester - edge cases
(SDD/DbC) - PRE/POST/INV
- , -
, . , 420+
. - . -
AI-.
Claude (Anthropic), - vendor
lock-in . - ӣ .
3. : pki-on-box
proof - . :
: 129
PR (merged): 15
: 34
: 10 ( 16 , 27.03 - 11.04)
: 1
Python : 36
C (firmware): 19
: 62 contract + 15 HW + unit (99+ passed)
MCU : 3 (STM32G474, STM32G431, STM32H750)
: RK3328 ARM64 (Cortex-A53, 2GB RAM)
: ~$129 (SBC $111 + STM32 $18)
AI: 1208 18 35 ( )
: github.com/vasilievsv/hw.pki-on-box
: TRNG -> DRBG (NIST SP 800-90A) ->
-> CA -> X.509. Entropy chain:
( ADC ) -> -> DRBG seed ->
. : Windows (),
Linux ARM64 (), MCU (firmware). SSH, systemd, Docker
. : $129 (RK3328 + STM32 ).
: 15.6 / , 1.6 .
: SELinux enforcing + eBPF- + systemd sandboxing. Zero
trust: HSM PKI Core, unix socket.
Firmware hardening: 12 NIST 800-90B (6 CRITICAL). .
:
53 / 9 - -: 99 , zeroization, FIPS
KAT, CI security pipeline. architect 8
, .
5 / 2 - MCU- (STM32G474, G431, H750),
PlatformIO, firmware TRNG. :
embedded- " HAL" .
firmware-coder HAL, PlatformIO, pinout -
.
35 . 6 (analyst, architect, coder, tester, firmware-coder, devops).
3 . 906 . 18.4 . .
: - 40+ -
. ޣ embedded- (firmware TRNG, HAL,
PlatformIO) DevOps (systemd, SELinux, eBPF, ARM64) - 60+.
18.4 . . ,
: architect , coder
, tester , devops - "" .
4. : Design by Contract AI
Design by Contract 1986 .
: , , .
. - : , .
AI- , DbC. .
. , .
. ӣ .
. : -> ->
postconditions -> .
(1986) -> AI- (2026):
: ->
: ->
: Eiffel -> + +
: ->
pki-on-box - :
contract: key_generation
PRE:
- DRBG.seeded == true
- DRBG.reseed_counter { max_requests
- algorithm {RSA-2048, RSA-4096, ECDSA-P256, Ed25519}
POST:
- private_key.encrypted(AES-256-GCM)
- nonce.unique()
- public_key = derive(private_key)
INV:
- padding == RSA-PSS () | RSA-OAEP ()
- PKCS#1 v1.5 ==
INV (PKCS#1 v1.5 RSA-PSS) - .
. , .
: Claude Mythos ۣ 0-day OpenBSD (27 ), FFmpeg (16 ), Linux
kernel, Rust unsafe. AI , . - Rust
unsafe . .
DbC - , Mythos. pki-on-box -
: , " ".
:
contract: certificate_issuance
PRE:
- issuer_ca.valid() && !issuer_ca.revoked()
- csr.signature.verify() == true
POST:
- cert.serial.unique()
- cert.signature.verify(issuer_ca.public_key) == true
- cert.extensions.key_usage.set()
INV:
- cert_chain.depth {= max_path_length
- root_ca.offline == true (air-gapped)
- . .
CRYPTO_COMPLIANCE_REVIEW ۣ 2 CRITICAL
: PKCS#1 v1.5 padding AES mode.
- . . .
contract-: test_crypto_engine_contract.py
5.
. - .
129 , 10 , $129 , - AI.
AI. - . PKI
TRNG .
. - , ,
. 420+ , 11 , embedded firmware DevOps ARM64.
- , . -
. Retry limit 3 - 7 . Heartbeat
3 - "?" . Task focus -
30- pytest .
. Vendor lock-in . - .
. - . - , .
Meyer B. "Object-Oriented Software Construction" (1988, 2nd ed. 1997)
Meyer B. "Applying Design by Contract" (IEEE Computer, 1992)
NIST SP 800-90A: Recommendation for Random Number Generation Using
Deterministic Random Bit Generators
NIST SP 800-90B: Recommendation for the Entropy Sources Used for Random Bit Generation
pki-on-box GitHub
|
Спутники
РН
SpaceX
Роскосмос
NASA
Claude Gemini 1 . Antropic . .