Open Source Summit Europe 2025

This talk outlines our ongoing efforts to achieve safety certification according to IEC 61508. While the audience is technically skilled, the specifics of safety standards might be unfamiliar. We will explore why software architecture is paramount (IEC 61508 mentions it more than 50 times) and discuss the difference between architecture and its documentation. We'll also clarify the distinction between project and product documentation, and the crucial relationship between safety and security. The talk will then shed light on some Zephyr-specific challenges, such as managing feature models via Kconfig and the implications of in-tree code generation scripts for our safety approach. We will provide an overview of our current state, including the now established coding guidelines and where we are at with implementing traceability mechanisms. Finally, we will take a look on the impact this certification effort will have on the project's future direction, emphasizing its importance for wider adoption in safety-critical applications. Our aim is to foster a clear understanding of the work involved and its significance, helping Zephyr grow as a leader in safety-critical systems.