Platforms
CHERIoT
CHERIoT is a CHERI-derived hardware–software platform for embedded and real-time systems, combining a processor, RTOS and fine-grained compartment model.
Overview
CHERIoT is a CHERI-derived architecture and hardware-software platform for embedded systems. It uses capability protection and fine-grained compartments in a design intended for constrained devices and real-time workloads.
Evaluate CHERIoT as a matched hardware–software design. The processor, RTOS, allocator, compartment ABI, libraries and SoC integration collectively determine the result. A CHERIoT-capable core alone does not establish the security of DMA, peripherals, boot or application policy.
Best fit
It offers a practical way to evaluate least authority, memory safety and isolated components in microcontroller-class systems.
What to evaluate
1. Target
Use CHERIoT for embedded workloads rather than assuming compatibility with application-class CHERI ABIs.
2. Stack
Evaluate the core, RTOS, compartment model, toolchain, libraries and board as one matched platform.
3. Version
Record the exact CHERIoT ISA and software release because architectural and ecosystem status matters.
Check current status
A CHERIoT core does not secure every peripheral, DMA path, protocol or application policy. Review the complete SoC and system design.
Verify availability, maturity, specifications, software support and lifecycle terms with the current platform owner before procurement.