ORTHO Isolation

Problem

Separate tenant workloads from security-critical management functions.

Approach

A layered design for root of trust, a minimal hypervisor, hardware data plane, formal isolation, and signed control commands.

Verification and limits

Architecture and proof materials require independent assessment. No completed security evaluation or deployed isolation guarantee is claimed.

This project summary reviews public documentation. It does not substitute for the project's build, tests, proof audit, or independent evaluation.

License

BSL / AGPL / MPL — see terms. The actual project terms govern use.