Genesis

IPE started as a Microsoft project to enforce code integrity on locked-down Azure infrastructure. Deven Bowers wrote the initial implementation and drove the early upstreaming effort on the LSM mailing list across multiple revision cycles.

Fan Wu took over, added fs-verity support, reworked the codebase to address upstream feedback, and carried it through to acceptance. IPE was merged into mainline in Linux 6.12.

The design motivation and technical rationale are documented in the kernel tree: Design Documentation.