Ferrocene - qualifying the Rust compiler using a fully open source tool stack
summary
A complete open source downstream of the Rust toolchain, ferrocene qualifies rustc for functional safety (including ISO 26262 and IEC 61508) by shipping LTS compilers, signed safety manuals and a full traceability matrix linked to a newly written Rust 1.68 language specification. Automation uses GitHub, CircleCI, Sphinx, sigstore and a serialized merge queue with bors-ng so every change is built and tested (the compiler sees ~1,600 changes per six weeks). The pipeline regularly produces releasable binaries and prevents regressions, yielding auditable, repeatable qualification artifacts.
AI-written summary · about
chapters (10)
- 0:00Start
- 4:12Rust Basics: Trains
- 5:36Rust Basics: Target Tiers
- 8:33Every build is a release
- 8:56Tools Used
- 13:36Straight-Forward Path to Improvement
- 14:09Ferrocene Spec
- 14:51Traceability Matrix
- 15:12No Such Thing As A Partial Build
- 16:03Platform Automation
related talks
01h 25mA Tour Through Ferrocene Development
25mContinuous compliance with Rust in automotive software
56mRust for Foundation Software
31mValidating Rust for industry: Certification meets formal analysis
22mRust as a Foundation for a Safe and Sustainable Future
56mRust for Safe and Scalable Automotive: Insights from
07mLightning Talk: “How Rust Is Steering Automotive Software Toward Safety”
28mSafety compliance of Rust libraries