Robots freeze their kernels because one bad change bricks a fleet. AxiomOS makes kernel behavior a set of verified, hot-loadable programs, so a deployed machine can change what it does without reflashing and without leaving its safety envelope.
VERIFICATION
In-kernel eBPF verifier using path-sensitive abstract interpretation, with an aarch64 JIT.
SCHEDULABILITY
WCET cost model over instruction classes feeding EDF utilization admission: attaching a program commits CPU time against a fixed budget, and the kernel refuses attachments that would exceed it.
ACTUATION
Reference monitor clamps every PWM and GPIO command to a per-profile envelope (duty ceiling, slew limit, e-stop latch) before it reaches MMIO. Zero-escape invariant established by unit tests and property-based testing.
EVIDENCE
A release-evidence gate ties every published number to a clean commit, a hashed artifact, and a committed capture. Results failing provenance are demoted to provisional and may not be cited — the gate has demoted prior headline results, including an earlier Linux comparison.
BRING-UP
GIC, ARM generic timer and RP1 GPIO/PWM/UART drivers written from scratch on Raspberry Pi 5; memory management, processes, ext2 VFS, syscalls. RP2040 co-controller as a hardware safety interlock.