• 5C5C5C
    link
    fedilink
    arrow-up
    7
    ·
    1 year ago

    When it comes to certifying your own software, the evidence is the key thing needed by the certifying bodies.

    If I’m someone who wants to get my Rust software safety certified, it’s not enough for me to tell the certifier “I compiled my software with this compiler from a project called Ferocene and they have a blog post saying that they’re safety certified. Give me a certification please.”

    Instead you need to show the certifier all the evidence that went into the safety case that achieved certification for Ferocene and then make a case that the evidence is relevant to your own safety case. This evidence from Ferocene is what you pay them for.