Camelot-OS is an open-source operating system ecosystem designed to bring strong security guarantees, robust isolation, and industrial-grade engineering practices to modern IoT and embedded systems. Camelot-OS is the successor of the initial ANSSI Wookey project and Ledger Outpost-OS developments.

Built from the ground up with security in mind, Camelot-OS targets microcontroller-based devices that require more than traditional RTOSes can safely provide — without sacrificing openness, performance, or developer control.

Camelot-OS minimizes the Trusted Computing Base (TCB) using a micro-kernel architecture. Critical services are isolated, reducing the impact of vulnerabilities and making formal reasoning about security possible.

Strong Isolation

Applications, drivers, and services run in separated compartments with explicit communication channels, limiting lateral movement and fault propagation.

Modular & Composable

Camelot-OS is not a monolith. It is an ecosystem of well-defined components — kernel, SDK, tooling - designed to be assembled according to your product’s needs.

Industry-Grade Engineering

The project adopts modern toolchains, reproducible builds, and traceable artifacts, enabling long-term maintenance and compliance with industrial and regulatory constraints.

Open & Auditable

All components are developed in the open under permissive licenses, allowing independent audits, community contributions, and transparent security review.

Core components

• sentry-kernel The Camelot-OS Secure kernel
• shield The Camelot-OS runtime for C and Rust applications
• merlin The userspace driver framework to help with user drivers implementations

Camelot build tools

• camelot-barbican The one project manager for Camelot-OS
• camelot-builder Camelot-OS docker image to build projects easily

Camelot SDK

• camelot-sdk The Camelot core SDK repository

Camelot security advisories

• camelot-advisories Advisories database for all Camelot-OS components

Public user-space drivers for various SoCs

• ST USB-OTG-FS USB "on-the-go" full-speed drivers for STM32 family
• ST USART driver for all STM32 family

Examples projects that can be used and modified if needed

• calculator serial-line simple calculator shell
• sha2-demo two task exchanging strings and their sha256 calculation using libecc cryptographic library