§ introduction

Overview

Why axiomOS exists and what it is — a research kernel for verifiable runtime extension.

axiomOS is a bare-metal Rust kernel that lets you change kernel behavior at runtime — but only after a verifier has proven the new behavior is safe to run. We target embedded systems and robotics, where deployed devices need behavioral updates but cannot tolerate the risk of a reflash.

The problem

Embedded systems deployed in the field need behavioral updates: new sensor fusion algorithms, modified control loops, updated safety policies. Traditional kernels require full reflash cycles, which are:

  • Risky in production environments
  • Slow — minutes of downtime
  • Wasteful — megabytes to change kilobytes
  • Dangerous — bricked devices on failed updates

The shape of the answer

Runtime kernel extension through eBPF. Programs are:

  • Verified for safety before execution
  • Hot-loaded without reboot
  • Attached to kernel hooks — syscalls, timers, GPIO, PWM, IIO
  • Detachable on-the-fly

This is proven in Linux, where eBPF underpins tracing, networking, and security. But Linux is unsuitable for hard real-time robotics: unpredictable latency, generous resource overhead, and a kernel that cannot fit in 22 MB.

What axiomOS is not

  • A production kernel — not yet
  • POSIX-compliant by design — partial userspace compatibility only
  • A Linux replacement

What axiomOS is

  • A research platform for runtime kernel extension
  • An exploration of Rust’s viability for systems programming
  • A testbed for verified runtime behavior modification

Read the architecture overview next.