Two-stage build (Nim->C->Zig link), RISC-V and ARM64 targets, QEMU boot test, security scan for sensitive content.
Markus Maiwald