Keynote: Welcome & Opening Remarks
summary
Keynote argues that safety now requires linking hardware, software, trained models, datasets and services into a system SBOM and automating traceability so bugs map to requirements tests and evidence. SPDX3 (announced as Spex 30) adds profiles for AI, data and hardware; prototypes in Zephyr prototypes show requirements→code→test tracing. Industry pieces mentioned: ALISA, Zen, Yako, Basel and strict Doc, plus an AI incident dataset where self driving cars jump from 12,000 to 400,000 vehicles and two thirds of reported incidents come from Tesla.
AI-written summary · about
chapters (9)
- 0:00Open source in automotive
- 1:45Safety challenges in autonomous driving
- 3:52Industry incidents and regulations
- 5:57Standardized metadata and SBOMs
- 8:00SPDX 3.0 for safety and security
- 10:48Tracing requirements to code
- 12:13Open source safety certification
- 14:41Reproducible builds and SPX3
- 15:44Community next steps
related talks
05mKeynote: Evolution of Open Source for Safe Usage in Critical Systems
40mBOF: Open Source Projects in Safety Critical Applications
28mSPDX: Tackling System Risk in Modern Supply Chains
04mKeynote: Welcome & Opening Remarks
41mKeynote: Welcome & Opening Remarks
16mKeynote: The Evolving OSPO
16mSPDXv3: Advancing Transparency in Software
22mKeynote: Bringing Greater Trust and Security by Design to the Open Source Ecosys...