BitFrost is the
preciously named "security platform" for the
One Laptop Per Child project. Naively simplistic, querulously written, and lacking acknowledgements (Garfinkel doesn't count), the
specification is nonetheless interesting and worth reading.
CapDesk creators, call your office.