agentic-os

Agentic OS serves as the control plane and operating system for the redevops.io Agentic Business OS, enabling small companies to run their entire business operations as a coordinated fleet of AI agents on self-owned hardware. It replaces fragmented SaaS tools with a unified infrastructure that includes a Mission Runtime kernel, a Projects cockpit, and a cost-aware LLM router. The core value proposition lies in its ability to optimize costs and maintain data sovereignty. The system employs a tiered routing strategy that directs agent tasks to the cheapest suitable model, prioritizing local models (like llama.cpp or ollama) for the bulk of the workload and reserving premium APIs for complex reasoning tasks. This approach significantly reduces operational expenses while keeping sensitive data on-premises. Key architectural components include: 1. **Fleet Orchestrator**: Manages the lifecycle of various business modules (billing, support, compliance, etc.), ensuring they run as independent agents within a shared context. 2. **Cost-Aware LLM Router**: Dynamically selects the best model for each task based on capability requirements and budget constraints, with fallback mechanisms. 3. **Human-in-the-Loop Approvals**: Critical actions involving money, compliance, or infrastructure changes require explicit human approval, ensuring safety and governance. 4. **Fine-Grained Permissions Plane**: Implements robust access control with row-level scoping and column masking, encrypted at rest, to secure data across different roles and applications. 5. **Projects & Sidekick**: A self-hosted web interface for managing missions and workflows, featuring "Sidekick," an AI assistant that provides grounded Q&A and supervises tasks using a curated knowledge base. 6. **Integration Plane**: Allows users to describe integrations in plain language, which the system compiles into governed connectors for services like Stripe, HubSpot, and Slack. Credentials are managed securely via a CredentialBroker. 7. **Governed Agent Gateway**: Provides a secure, audited northbound path for external agents (e.g., Claude, ChatGPT) to invoke ReDevOps capabilities without bypassing security controls. The system is designed for self-hosting, offering flexibility to deploy specific modules or the entire stack. It supports cross-module workflows, such as automatically handling new customer onboarding across billing, support, and compliance systems. The project is source-available under AGPL-3.0 with a Commons Clause, allowing free internal use while restricting commercial resale.