White paper

Watch the build, not only the source

System software — firmware, drivers, bootloaders, RTOS — is decided by the toolchain, the flags, and the binaries the linker pulls in. No mainstream tool observes that environment. This paper sets out the gap, the threat model, and how Strig inspects the build, signs the evidence, and gates the release.