From 25 million instructions to one faulty skip: AI-driven fault analysis of a secure boot

Global Business Fri, 06 Nov 2026 05:37:20 GMT Moderate confidence — 64/100

In part 1, we argued that the walls around firmware analysis are coming down when an AI agent drives the right instruments: esFirmware to run, trace and fault firmware, and Epoch to turn an execution into a time-travel trace.
This post opens the case behind that claim.
The target is the boot ROM of a widely deployed ARM-based router SoC.

Unverified

In part 1, we argued that the walls around firmware analysis are coming down when an AI agent drives the right instruments: esFirmware to run, trace and fault firmware, and Epoch to turn an execution into a time-travel trace.
This post opens the case behind that claim.
The target is the boot ROM of a widely deployed ARM-based router SoC.

Sources: Eshard