A minimal, hardened GNU/Linux distribution built from source.
- linux-hardened kernel configured per machine, with signed modules and kernel lockdown.
- Small userland based on musl, BusyBox and sinit; unused features compiled out.
- Every source pinned by SHA-256 and verified against upstream GPG signatures.
- Own build tool (
cigbuild) and package manager (smoke) with a system audit command. - Wayland desktop (dwl, foot); no X11, no D-Bus.