Xen Summit 2026

Xen and Zephyr are walking parallel paths toward functional safety within the Linux Foundation, and both face the same problem: a safety case is a large, manually maintained argument that drifts the moment the design changes, and is hard to exchange between the projects, suppliers, and integrators who depend on it. This talk shares where Zephyr has gotten with a data-driven approach, and opens a conversation about what it could mean for Xen.
We start with SPDX 3.1's Functional Safety profile, which gives the safety case a machine-readable form: requirements and their refinement, verification activities, pass/fail evaluations, evidence, and assumptions of use, expressed as a graph that tools can produce, exchange, and check. We then show how Zephyr leverages it in practice—generating a "safety SBOM" from project content rather than assembling a safety case by hand, recomputing verdicts as code evolves, and detecting which evidence has gone stale.