Engineering Trust - Formulating Continuous Compliance for Open Source

Explore a comprehensive conference talk that introduces the Eclipse Trustable Software Framework (TSF), a lightweight continuous compliance framework specifically designed for Free and Open Source Software (FOSS) projects. Learn how traditional requirements processes fail in both high-level wishlist scenarios and low-level implementation narratives, and discover why formal process models struggle with the dynamic nature of FOSS development. Understand how the TSF addresses these challenges by providing a workflow-agnostic solution that requires only git as a prerequisite, allowing teams to organize and evidence their own objectives rather than just meeting external standards demands. Examine the framework's unique approach to generating automated, transparent, and traceable evidence bodies quantified through confidence scores that inform critical project decisions and help consumers evaluate software trustworthiness. Gain insights into practical TSF applications through real-world examples and discover how this methodology maps to functional safety standards to support both certification processes and ongoing assessment requirements. Master the concepts behind continuous compliance in open source environments and learn how to implement trust engineering practices that preserve the valuable dynamic characteristics of FOSS projects while maintaining rigorous compliance standards.