About this project

aiueos is an operating system designed to provide a secure, capability-based environment for AI agents. It is written in Kotoba and aims for a "C-free bare metal" production profile where the loader and kernel are compiler-emitted, removing traditional C-based decision logic from the Trusted Computing Base (TCB). Key technical features include: - Capability-based Security: It acts as a capability broker, enforcing decisions made by the separate 'grant' authority. - Wasm Execution: Uses Chicory to execute compiled Kotoba Wasm components with instruction-level fuel metering and memory limits. - Hardware Support: Includes a working boot process (UEFI/Multiboot2) and partial implementations of physical memory allocation and CPU fault handling on x86-64. - Component Architecture: Supports a hosted window manager, IME, and GPU presenters, with a focus on containment against high-level adversaries. - Deployment Profiles: Offers multiple profiles including a bare-metal x86-64 kernel, a Linux-hosted VM bundle, and a JVM-hosted cloud desktop profile.