loxboot

A C99 zero-heap bootloader core for embedded firmware — built around an A/B slot model and a rollback-oriented boot flow.

C99Zero heapBootloader core
Overview

A rollback-oriented boot flow for firmware

loxboot provides the core logic a small bootloader needs: two firmware slots, validated boot state, a UART path for updates, and a clean handoff boundary to the platform — all without heap allocation.

A/B slot model

Two firmware slots for safe update and fallback.

Boot state validation

Boot state is validated before handoff.

UART update transport

Firmware update transport over UART.

Rollback-oriented flow

The boot flow is designed around rollback from a bad slot.

Platform handoff boundary

A clear boundary where the bootloader hands control to the platform.

Zero-heap C99

Consistent with the LOX design rules: no heap, small surface.

Design rule

Like the rest of the LOX family: predictable behavior, small integration surface, clear failure modes — and no claims without evidence.

Next in the family loxguard — Guard Blocks for embedded C →