aos-ce README

The project's README from github.com/unicity-aos/aos-ce. As one markdown file: README.md.

AOS Community Edition

AOS Community Edition is the open agent operating system for people who want an inspectable, composable environment for agents.

It owns the Community Edition product surface: the aos CLI, HTTP API, distributions, first-party capsules, provider and model experience, and Unicity Audit.

Workspace layout

crates/       Product CLI, HTTP API, control client, and shared product code
capsules/     First-party production capsules
distros/      Community distribution manifests and release metadata
docs/         Product and operator documentation

Install

The supported installer installs the aos product command, its pinned runtime, and the exact 22 Community Edition capsules built from this source tree under the product-owned ~/.aos root:

curl --proto '=https' --tlsv1.2 -fsSL https://aos.unicity.ai/install.sh | sh
aos init

aos init, including aos init --offline, provisions from those local, product-versioned capsule assets. A fresh Community installation automatically resumes Astrid's ten-capsule batches after each rate-limit window; installing all 22 capsules includes approximately two minutes of waiting. Completed installs are not repeated, and a stalled batch remains an error. Re-running the installer performs a coordinated product upgrade without rewriting a standalone runtime installation. Every release publishes checksums, Sigstore bundles, GitHub build-provenance attestations, and runtime-compatibility.toml, which pins the exact runtime release and WIT commit. Its machine-readable runtime-compatibility and upgrade/self-heal gates must both be true before a tag can publish. The latter is approved only after the exact candidate preserves a frozen standalone-home clone and boots with freshly generated runtime coordination state.

Command boundary

AOS owns its product roots, including init, status, migrate, update, distro, mcp, daemon, and serve-health:

aos status
aos status --json
aos --principal codex-code mcp serve
aos daemon foreground --workspace /workspace

On Unix, aos daemon foreground replaces the AOS process with the persistent bundled daemon, preserving direct signal and exit-status ownership for process supervisors. On other hosts it waits for the daemon and preserves its exit status. Both paths apply the product-owned runtime home, .aos workspace layout, enforced Community Edition distro, and stderr logging environment. Neither path enables ephemeral lifetime.

Every other runtime root is part of the AOS CLI directly. Arguments, exit codes, and signals pass through unchanged; there is no nested aos astrid or aos runtime namespace:

aos doctor
aos capsule build

When AOS owns a root such as status, init, update, or mcp, its product implementation replaces the lower-level command at that same location. The complete supported surface therefore remains aos <verb>. Release validation compares the exact pinned runtime's public command inventory with AOS's classified root contract, so a new runtime verb cannot enter a product release without an explicit inherit-or-own decision.

aos mcp serve is the product edge shared by Codex, Claude, and Grok. A client that supports MCP form elicitation keeps presenting its own constrained approval forms. When a client does not, the default --interaction auto mode uses a local AOS decision surface: AppKit on macOS, a native Windows dialog, or Pinentry on Linux. --interaction client, native, and deny make the policy explicit. The local bridge accepts only a single boolean or the fixed AOS approval enum; arbitrary strings, password-shaped fields, and URL elicitations are never collected through it.

Build on AOS

Unicity AOS is the operating system in which agents and agent-native software run. Capsules are general user-space building blocks: users can compose them into harnesses, meta-harnesses, connectors, services, or other systems. Community Edition ships Forge as OS construction tooling so a fresh agent can inspect the running system, learn the capsule model, identify a real capability gap, and build and verify a least-privilege capsule. Forge also installs the meta-harness skill, which teaches an agent how to build a governed meta-harness on AOS by treating its instructions, memory, skills, harness code, tools, capsules, traces, and evaluations as an improvable user-space world. The agent is instructed to notice useful extensions during real work and reach for Forge proactively when new code is the right way to improve that world.

See Extending an agent's world on AOS for the world model, research loop, Forge boundary, optional worker pattern, and representative user experiences.

Provisioning another principal keeps the authenticated operator separate from the target environment:

aos --principal operator init --target-principal alice

This AOS release fixes its distribution state to Unicity CE. Use a standalone astrid installation and runtime home to apply another distribution. Homebrew installations update with aos update. Direct installs resolve the signed stable channel by default and can select dev, nightly, or an exact version; all remain fail-closed until their signed metadata is actually published. See Signed AOS release channels.

Import an existing runtime

The aos CLI can deliberately copy compatible state from a standalone runtime installation without changing the source. See Importing standalone runtime state for the exact allowlist, integrity checks, recovery behavior, and command.

License

Except where otherwise noted, AOS Community Edition is dual-licensed under the MIT License or the Apache License 2.0, at your option.

aos-ce (unicity-aos/aos-ce)

Searching Database…

8.5K ·GitHub
Aos-ce
What is this?AOS Community Edition is an open-source 'agent operating system' that gives AI agents an inspectable, composable environment, built around the aos CLI, an HTTP API, pre-built capsules, and audit tooling.
Is this a CLI tool, or an actual operating system that replaces my OS?It is not a replacement OS - it runs on top of Linux, macOS, or Windows as the 'aos' command plus a bundled daemon, with a fixed set of 22 'capsules' (modular user-space building blocks) that agents compose into harnesses, connectors, or services.
Which coding agents can actually talk to this?aos mcp serve exposes an MCP edge shared by Codex, Claude, and Grok; if a client lacks its own MCP approval UI, AOS falls back to a native local approval dialog (AppKit on macOS, a native dialog on Windows, Pinentry on Linux).
Does the install finish instantly?No - a fresh install resumes capsule installation in batches of ten after each rate-limit window, so getting all 22 capsules takes roughly two minutes of waiting, and a stalled batch is treated as an error rather than retried silently.
What is Forge for?Forge is the OS construction tooling shipped with Community Edition that lets an agent inspect the running system, find a real capability gap, and build and verify a least-privilege capsule to fill it.
What does the meta-harness skill do?It teaches an agent how to build a governed meta-harness on AOS by treating its own instructions, memory, skills, code, tools, capsules, traces, and evaluations as an improvable world it can extend over time.
Can I import state from an existing standalone AOS runtime?Yes, the aos CLI can deliberately copy compatible state from a standalone runtime installation without altering the source, following an allowlist with integrity checks and recovery behavior.
What is Unicity Audit?It is part of the Community Edition product surface alongside the aos CLI, HTTP API, and distributions, though the README does not detail its specific audit mechanics.
What are similar projects?ruflo, openrig, codify, gitagent, Raven, cynative, newsjack, grok-build
Which topics is it in?agent-os, operating-system, unix, harness, agent-framework, sandbox, homebrew, cli-tool, skills, agents, mcp-server, plugin
Creator
unicity-aos
Size
22 MB
Stars
8.5K
Updated
CommitOct 15Release2026.10.1Oct 15
Age
3mo
Commits · 90 Days