A sovereign, deterministic software stack for safety-critical systems
LL BERK builds the software infrastructure that replaces foreign middleware in critical defense, space, telecom, medical, automotive and robotics systems. Same input, on every machine, every time — bit-identical results.
From language to digital twin: a five-layer sovereign stack
Each layer delivers value on its own; together they form the complete software infrastructure a safety-critical system needs.
BERK Language
Bilingual (Turkish/English), certification-targeting deterministic systems language. No panics, WCET-bounded, machine-checked determinism.
Learn more →BERK DDS
Pure-Rust DDS/RTPS networking stack — wire-compatible with CycloneDDS and Fast-DDS. Fuses QoS events with domain safety math into one decision.
Learn more →Berk Digital Twin
Deterministic physics + explainable decision core. Bit-identical state_hash on every platform; replay, rollback, auditable autonomy.
Learn more →BERK-RTOS
Sovereign real-time operating system. "One kernel — six personas": one RTOS with sector profiles from defense to medical.
Learn more →Hard RT Core
EAL7-targeting deterministic execution engine: a concurrency design whose TLA+ model is checked with TLC, HSM integration and an immutable decision journal (DJR).
Learn more →One vision, five layers
From language to operating system, network stack to digital twin — all built on one principle: provable determinism.
Explore the technology →One provable decision instead of scattered checks
Wire-compatibility
Our DDS stack is wire-compatible with Eclipse CycloneDDS and eProsima Fast-DDS (the primary ROS 2 RMWs) — a low-risk, low-cost migration path into existing ROS 2 / DDS systems.
Safety math ⊕ QoS
QoS liveliness, deadline and reliability events are fused with separation distance, ASIL, FDIR and risk math into a single prioritised safety decision: stop category, safe-mode, escalation.
BERK↔Rust equivalence gate
The field-going .berk source is machine-checked against its Rust mirror across 10 domains (differential testing). Source–mirror equivalence is an invariant enforced on every CI run.
Designed to produce evidence
Determinism, purity, WCET bounds, no-heap and no-panic are machine-checked properties; error handling is contract-based and traceable, not a panic. The trust base is measured: 1,689 natives, 1,689 contracted, FFI registry 515 (10 November 2026). Targeting DO-178C, ISO 26262 and IEC 62304; no formal qualification yet.
Readable in your language,
provable by machine
A truly bilingual (Turkish/English) syntax: keywords are first-class at the lexer and canonicalized to one AST. Determinism is not a convention — it is a declared, machine-checked effect.
- ✓16 machine-checked effects — saf, deterministik, sınırlı/WCET, tahsis_yok, panik_yok, sabit_zaman…
- ✓Contracts, not monads — a constant-argument violation is a compile error; at runtime a traceable trap, not a panic
- ✓1.0.0 GA — core syntax frozen, under a backward-compatibility contract
- ✓78 signed public packages — installed with bpm from packages.berk-systems.com; plus 12 licensed sector packages (SHA256 + ed25519-signed)
// the same program, in two languages fonksiyon ana() -> sayı yap // TR yazdır("Merhaba") son function main() -> int do // EN print("Hello") end // effects are declared on the function saf fonksiyon topla(v: liste) -> sayı yap döndür indirge(v) // bit-for-bit son // one API — Cortex-M, RISC-V, ESP32… 18 MCU families, same code kullan embedded::bal::gpio gpio_yaz(PA5, YÜKSEK)
Measured, not claimed
Each of the five products with its own measurements — all figures come from real runs in that product’s repository; none are estimates.
Wherever it is critical
The same deterministic core provides decision security, operational optimisation and sim-to-real validation.