From verified alpha to release candidate in one product line

Reinventy Solutions Corp. has completed TMOS-7 and promoted Tin Man OS v0.7.0-rc.1 to the Citadel software-qualified release candidate.

The milestone changes the public posture of the product. Tin Man OS is no longer represented only by a reproducible AGX Thor image artifact. It now carries a software-qualified composition, lifecycle, compliance and provisioning stack designed to turn sovereign synthetic intelligence into a repeatable commercial product line across real machines.

Eight of the nine programme tracks from architecture to production are complete. TMOS-8 is active: the final phase for Principal-authorized physical qualification, production signing and the path to Tin Man OS 1.0.

What Citadel closes

The v0.7.0-rc.1 public evidence record includes:

  • a bounded composition SDK covering eight commercial product editions;
  • an authored-component SBOM and the generated Yocto SPDX package inventory;
  • an ML-BOM with two deployment contracts and zero model payloads embedded in the image;
  • a fail-closed licence policy;
  • an image-derived compliance bundle verified under AArch64 QEMU;
  • a bilingual Release Qualification and Compliance Center;
  • a bilingual SSD Provisioning Studio for release, edition, customer, company, licence and first-boot identity;
  • a content-addressed provisioning candidate whose physical-flash control remains visibly locked behind TMOS-8.

The underlying evidence chain records 59/59 unit tests, 11,659/11,659 Yocto tasks, 24/24 deterministic contract-SIL cases, 9/9 first-boot and A/B lifecycle gates, and zero block writes during the qualified software path.

A product line, not a one-off image

Citadel validates the composition contract for eight commercial editions: Flight, Drive, Marine, Materials, Motor, Industrial, Robotics and Energy.

Flight, Drive and Marine have deterministic contract-SIL evidence from TMOS-5. Robotics joins them through TMOS-6. Materials carries the read-only Scholar reference profile from TMOS-4. Motor, Industrial and Energy advance inside the active Atlas / TMOS-8 track.

Space and MedTech remain discovery opportunities requiring distinct assurance and regulatory cases. Agriculture follows a compose-first strategy across Drive, Robotics, Flight and Materials before any separate standalone edition is created.

The boundary that makes the claim credible

Citadel is a software-qualified release candidate, not yet a hardware-qualified production release.

Physical SSD flashing, hardware measured boot, full-device read-back, physical A/B recovery and the production signature using the Principal’s offline key remain explicit TMOS-8 gates. The release candidate contains no path to mutate the live Tin Man runtime, Guardian, policy, kill switch or production media.

That separation is not a limitation hidden in the footnotes. It is the architecture: the intelligence can advance while the authority required to make it physical remains external, explicit and independently qualified.

The partnership moment

TMOS-8 is where the final hardware gate and the next commercial edition wave converge. Reinventy is opening selective conversations with NVIDIA ecosystem leaders, silicon and systems companies, OEMs, industrial integrators and strategic capital able to accelerate qualification and reference deployment.

The public record establishes the release, its evidence and its boundary. Edition economics, integration maps, provisioning detail and programme-specific roadmaps remain reserved for qualified conversations.

Sources: Tin Man OS canonical Forgejo record · config/project.json · docs/ROADMAP.md · docs/TMOS7_RELEASE_EVIDENCE.md · release v0.7.0-rc.1 · commit 60cbb5ed2c4969afdff7987387ada70b7038dfcb · verified 2026-08-26