Skip to main content

For security, only use links and commands directly from these docs or official release announcements.

LapEEAbout Get started Images Verify Security AI guides Build

LAPEE // measured boot stream8734

TPM QUOTEPCR REPLAYAK BINDNODE MESSAGE

UKI at /EFI/Boot/BootX64.efiHB_CONFIG: operator tmpfs, enforced lapee.jsonPCR15 extends node-message-idsplash shows the live URL + QR

evidence streamEvidence streamwaiting for browser entropy

LapEEHyperBEAM

Boot HyperBEAM from a signed USB appliance image and verify the node from TPM-backed boot evidence.

01Download imagesGet the signed appliance imageVerify the release hash or signature, then write the selected runtime image to USB.02Operator configSet public node policyOptional ESP config is copied into tmpfs and included in the attested node message.03Verify nodeCheck quote, replay, node identityFetch the boot-attestation bundle and verify EK, AK policy, PCR 15, and node-message-id.04Security modelKnow the boundaryLapEE reports boot and runtime evidence for one appliance node. It is not a general desktop.

Docs

About LapEE
Get started
Download images

Operate

Operator config
Secure Boot
Verify node

Reference

Evidence
Security model
Source map
AI guides

© 2026 LapEE