https://boundarydevices.com/high-assurance-boot-hab-dummies/
https://www.nxp.com/docs/en/application-note/AN4581.pdf
https://blog.quarkslab.com/vulnerabilities-in-high-assurance...
A lot of it depends on Das U-Boot, the favorite open-source bootloader of the eLinux crowd: