Sabitlenmiş Tweet
🧃 Introducing stereOS: a Linux based operating system hardened and purpose built for AI agents.
It's clear that agents need an ACTUAL operating system (not what people are calling an "OS") to witness the full breadth and depth of their capabilities while mitigating the blast radius of autonomous, untrusted actors.
But there are so many problems with AI sandboxes today:
* Going out to the apple store and buying a mac mini will never scale and is way too expensive (obviously)
* Running in Docker is too restrictive (agents can't stand up their own container infrastructure, no sub virtualization, docker-in-docker is very broken)
* Firecracker strips all the hardware so GPU PCIe passthrough, secure boot, FIPs, etc. is out of the question.
* Native VMs are too fat and the overhead of 1 agent per VM is too much.
stereOS takes a different approach: it's a full NixOS system that you boot and then kick off agent sandboxes inside with gVisor + /nix/store namespace mounting. Each agent gets their own kernel and the /nix/store is read only by nature. Even if the agent was somehow able to escape the gVisor virtual kernel, they'd land on the NixOS system as the "agent" user! Not your actual hardware!!
If you want to take a defense-in-depth approach, we support "native" agents that run at the system level kicked off by our `agentd` utility. These agents, on their own, can manage and kick off other sub agents using the internal sandboxing mechanisms.
Today, we're open sourcing all of this:
* stereOS: our purpose built Linux OS - github.com/papercomputeco…
* masterblaster: client utility to launch, manage, and orchestrate agents - github.com/papercomputeco…
* stereosd: the stereOS system control plane daemon - github.com/papercomputeco…
* agentd: the stereOS system agent management daemon - github.com/papercomputeco…
Give it a try, throw us a star, and let me know what you think 🧃⭐️
English
