CambiOS – a new Rust-based, sovereign identity, zero-trust OS
Hello HN, What is CambiOS? A microkernel OS built in Rust, that boots in QEMU under x86_64, AArch64, and RISC-V - targeting formal verification. Processes are assigned unforgeable cryptographic identity and IPC gates access to only allowed endpoints. What does it want to be? Ambitious. Cutting away latent security issues, corporate surveillance, centralized identity and data hosting, and OPEN. With the advent of the coding tools, building the things we want is a bit less of a lift. Could it replace Windows? Sure. That's where the idea was born. Secure and intuitive, in a nutshell. I've been…
What it does
In the maker’s words, at launch
Hello HN, What is CambiOS? A microkernel OS built in Rust, that boots in QEMU under x86_64, AArch64, and RISC-V - targeting formal verification. Processes are assigned unforgeable cryptographic identity and IPC gates access to only allowed endpoints. What does it want to be? Ambitious. Cutting away latent security issues, corporate surveillance, centralized identity and data hosting, and OPEN. With the advent of the coding tools, building the things we want is a bit less of a lift. Could it replace Windows? Sure. That's where the idea was born. Secure and intuitive, in a nutshell. I've been working on this for a couple of years and coding earnestly for months. Looking for feedback and would LOVE to find collaborators. I saw a hole in the OS landscape and am working to close it - the closest other alternative I could find is Google's Fuschia (not sovereign by any stretch.) I'm Jason, here for questions if they come up.. cheers! More info here: https://coherentforge.com/cambios
Does the same job
all alternatives →- SASeKey: An SSH Agent for OS X, Using Secure Enclave and TouchID, in Rust2017 · github.com · ▲169
- VQVas-quod – A minimal Linux container runtime written in Rust2020 · github.com · ▲110
- ACA cross-platform toolkit to explore OS internals and capabilitiesJan 2026 · ▲7
I built this toolkit with my colleague to dive deep into OS internals and automate the identification of privilege escalation vectors. Written in pure C without external dependencies, it explores everything from Linux capabilities and Docker escapes to Windows token manipulation and service permissions. We believe that the constant struggle between breaking and securing systems is the ultimate driver of software evolution. This tool is our contribution to that cycle, designed for researchers who want to understand how low-level misconfigurations can be discovered and audited across different…
- IBI Built a Groth16 ZK-Proof Verifier from Scratch Using Rust2024 · github.com · ▲6
I've always been fascinated by cryptographic principles, so I decided to dive deep into zero-knowledge proofs and implement a Groth16 proof verifier entirely in Rust. This project validates cryptographic proofs and demonstrates how succinct, verifiable computations can be achieved. Using Rust's powerful libraries like arkworks, I implemented pairing checks, public input commitments, and proof validation logic while ensuring the code remains modular and efficient. I handled the complexities of affine group operations, scalar multiplications, and optimized public input verification to make…
- LZLilith-zero: Ultra-fast, Rust-based security middleware for MCPApr 2026 · github.com · ▲9
Lilith Zero is a high-performance security runtime designed to mitigate data exfiltration and unauthorized tool invocation in LLM-based agent systems. By interposing at the transport layer, Lilith Zero enforces security invariants through deterministic policy evaluation and strictly framed execution. Lilith Zero is OS, framework, and language agnostic, providing uniform security primitives across diverse implementation environments.
- OTOckam – Tools for end-to-end encryption, in Rust2021 · github.com · ▲10
More dev tools this month
the category →
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 1d ago · opentrailpaper.com
Launched alongside, June 2026
the whole month →
Fundraisly▲1,544AI fundraising agent that finds investors and books meetings
AI · Jun 2026 · fundraisly.com
- H6Homebrew 6.0.0▲1,481
Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal Homebrew JSON API, sandboxing on Linux, better defaults informed by our user survey, many brew bundle improvements, improved performance and initial support for macOS 27 (Golden Gate). Happy to discuss any questions here!
Dev tools · Jun 2026 · brew.sh
- PU
hope you enjoy
Life & fun · Jun 2026 · vorpus.github.io
- IM
Life & fun · Jun 2026 · hackernewstrends.com