Skip to content
astrapatchastrapatch

Getting Started

Introduction

astrapatch is an open-source framework for spacecraft software security engineering. It is being designed to help engineers answer one hard question:

Can we remediate a software vulnerability while preserving the behavior and operational constraints of the spacecraft?

Project status: pre-alpha (Phase 01, Foundation). The pipeline runs end to end on the included demo application. The framework repository is currently private; request contributor access to get it. Nothing here is qualified for operational use, and pages marked Draft describe planned scope only.

What it is designed to do

The framework brings together a workflow that is usually spread across separate tools:

  • Analyze flight software with existing static analyzers, dependency inventory and SBOM generation.
  • Remediate findings with candidate patches from configurable AI or rule-based adapters, each treated as an untrusted proposal with recorded provenance.
  • Simulate baseline and candidate builds under the same mission scenarios.
  • Verify candidates against deterministic, operator-defined acceptance policies.
  • Review the result through exported evidence and an operator-controlled approval step.

Principles

  • Open source by design.
  • Security engineering before autonomy.
  • Verification before deployment.
  • Evidence instead of unsupported AI confidence.
  • Human approval for operationally significant actions.
  • Reproducibility as a fundamental requirement.
  • Local execution and source-code ownership.
  • No dependence on a single AI model or cloud provider.

What it is not

astrapatch is not a satellite control dashboard, an autonomous flight-control system, or a generic vulnerability scanner. It does not promise to safely patch every spacecraft, and it is not a substitute for flight qualification and mission-specific verification.

Next