{"thread":{"id":"31029","subject":"Complete audit trail for embedded (Linux) system lifecycle with Git","startedAt":"2012-07-15T08:47:36Z","lastAt":"2012-07-15T08:47:36Z","messageCount":1,"participants":["Kalle Launiala"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"195076","messageId":"CAHLTmjmrXSGQdS-wZ-K23grQTkxHFJzA-u05GJEqrtdLusBb8Q@mail.gmail.com","threadId":"31029","inReplyTo":null,"subject":"Complete audit trail for embedded (Linux) system lifecycle with Git","fromName":"Kalle Launiala","fromEmail":"kalle.launiala@gmail.com","sentAt":"2012-07-15T08:47:36Z","receivedAt":"2012-07-15T08:47:36Z","isPatch":false,"sender":{"key":"kalle.launiala@gmail.com","avatar":null},"body":"Hello,\n\nWe are to solve a complete audit trail solution for full subcontractor\nvalue-chain fullfilling European Union machinery directive:\nhttp://ec.europa.eu/enterprise/sectors/mechanical/machinery/\n\nTo summarize, the directive is created to ensure safe operating\nenvironment for all kind of machinery devices (from industrial\nmachinery to consumer shopping-centre lifts/elevators). This also\nincludes the embedded software that controls the machinery (which is\nas we know, the make-or-break the true safety of the device).\n\nThe solution is based on the very core Git functionality, in very\nbrief overview explained here:\nhttp://abstractiondev.wordpress.com/git-based-distribution/\n\nAs Git is completely file-system based, in our solution it is used as\nthe core technology to audit ANY digital document or information. It\nis serving as a distributed set of \"master data\" repositories,\nincluding the digital signature repositories and 3rd party validation\nstacks. In the validation chains it is critical to be able to support\nresponsible decision makers to approve design choises beyond the\nsoftware, thus the digital signature infrastructure for any\nlegal-binding document is as important as the actual embedded software\nstack, that is by its nature version controlled within Git as well.\n\nWhile I would hope this post to serve a purpose for demonstrating that\nGit works as a perfect solution in the core, I'd also like to hear if\nthere is already established community/ongoing process of achieving\nanything described above?\n\nWe have no intention of \"reinventing the wheel\" here, although being\nvery core solution for ANY audit trail and being so close based on Git\n- bare functionality, I'm expecting any existing solution to share\nmuch of similar design. Any existing tooling to support the solution\n(especially dynamic cross-connected metadata repository searches - the\nbottom image of the overview, that indexes the repositories together)\nwould be very welcome. The current technical solution is using GnuPG\nfor the digital signatures and open-source cross platform XML-database\nfor metadata indexing - grid databases being considered for the larger\nimplementations.\n\nAny comments and/or feedback would be greatly appreciated.\n\nCheers,\n\nKalle Launiala\n"}]}