Human Authority Hardware
for enterprise.
Passport Prime gives teams a trusted screen, protected keys, KeyOS apps, and QuantumLink connectivity for high-risk approvals that should not live on AI-connected phones, laptops, browsers, or cloud accounts.
Talk to FoundationThe trust boundary is broken
Approval belongs outside the software blast radius.
AI-connected phones, laptops, browsers, and cloud accounts can request actions, shape what users see, access credentials, and write the audit trail.
When the same environment controls the request, the screen, the credential, and the log, approval is no longer an independent check.
Passport Prime moves the final decision onto KeyOS-powered hardware the user can see, hold, and control.
Build on KeyOS
Build custom approval apps on a real security OS.
KeyOS is Foundation’s security-focused operating system for Passport Prime: a Rust microkernel, sandboxed apps, process isolation, and protected master keys.
Use it to build internal approval apps, signing policies, custody flows, and high-stakes workflows that can connect back through QuantumLink and your enterprise systems.
Supporting workflows
- KeyOS Rust microkernel
- Sandboxed app model
- QuantumLink pairing with a dedicated Bluetooth chip
- Policy-driven signing
- Enterprise system integrations
- Custody and treasury workflows
Passport Prime
Programmable hardware for human authority.
Passport Prime brings a trusted display, protected master keys, KeyOS, app sandboxing, QuantumLink Bluetooth with a dedicated Bluetooth chip, and fleet deployment into one device built for decisions that cannot be delegated to ordinary software.
Trusted display
Show the approval request on Passport Prime’s own screen, not inside the phone or browser asking for trust.
Protected master keys
Keep signing keys and credentials protected on dedicated hardware, away from general-purpose computers.
KeyOS Rust microkernel
Run approval, custody, and internal security apps on Foundation’s Rust microkernel architecture.
Sandboxed apps
Isolate apps and processes so one workflow cannot turn into a shared enterprise risk surface.
QuantumLink Bluetooth
Connect wirelessly through Foundation’s post-quantum encrypted Bluetooth system, running on a dedicated Bluetooth chip.
Fleet management
Provision devices, distribute apps, update firmware, and apply policy across teams.
Open source architecture
Give security teams inspectable hardware and software instead of asking them to trust a black box.
USA manufacturing
Assembled in the USA in an ITAR facility for organizations that care about supply chain and provenance.
Build with Foundation.
Tell us which decisions need to leave ordinary software: approval flows, custody policies, internal apps, fleet deployment, or something custom.