Delivering Trustable Software
Software powers large parts of our everyday lives. Many of us naturally trust it, but have you ever asked yourself - ‘Why do you trust software?’
Trustable Tenets
We work on critical software projects where Codethink and our clients demand evidence to answer fundamental questions about the software. We do this by applying the following tenets:
- Provenance: Where it comes from, who produced it, and what claims they make about it.
- Construction: How to construct, install and run it. Also, how to be sure that we constructed, installed and ran it correctly.
- Change: How to update it, and be confident that it will not break or regress.
- Expectations: What it is expected to do, and what it must not do.
- Results: What it actually does, compared to our expectations.
- Confidence: Our confidence in the software, based on all of the above.
Codethink and the Eclipse Foundation
On 8th January 2025, Codethink announced its membership in the Eclipse Foundation and the Eclipse SDV Working Group as a strategic member. This milestone reflects Codethink’s commitment to driving innovation and industry standards in the emerging field of trustable software.
You can read the full release here.
How else can Codethink help?
We support, recommend, and make active use of concepts, tools, and outputs from initiatives that help to deliver evidence and accountability throughout the software lifecycle:
- requirements capture
- architecture and design
- development and maintenance
- build and integration
- test, verification and validation
- operating system stack and toolchain
- project infrastructure and version control
- governance and compliance
Examples include: Baserock, BuildStream, Civil Infrastructure Platform, Debian, Doorstop, Git, GitLab, GNOME, The Linux Kernel, Mustard, OpenChain, OpenControl, Reproducible Builds, SPDX.
Related articles: