This is a split responsibility between the OS vendor and the customer,  just as with a trusted environment that&#x27;s not backed by crypto&#x2F;TPM.<p>The normal benefits of frequently releasing code are at play here, just at the OS&#x2F;kernel level instead of a webapp. Testing can be completed against the different channels of CoreOS in staging environments as well. It&#x27;s recommended to run some beta machines mixed into a fleet of stable machines to catch any issues specific to your environment.<p>A unique feature of CoreOS is that it ships an upstream kernel that doesn&#x27;t have tons of backports and bugfixes. This means the upstream testing&#x2F;performance infrastructure is leveraged for more visibility into the release.<p>(CoreOS employee)