Build & release field kits

StealthForge

Deterministic build pipeline. Every unit ships with a device-specific cryptographic identity, validated software load, and full SBOM. Each release is a complete build, not a patch.

Build

- DISA STIG hardening

- SCAP verification

- Cryptographic artifact signing

- SBOM generation

- Tamper-evident build verification

Release

- Deterministic image deployment

- Sealed unit configuration

- Version-controlled release pipeline

- Field unit replacement workflow