Elvboot
Boot trust chain compiler for FreeBSD verified boot — build, sign, attest, deploy. Tamper detection for your own boot path: decisions live in a database, artifacts are generated, everything is inspectable and replayable
Description excerpted from the original listing, which is linked below.