capability-security

Astrid is a portable, capability-secure operating system for composable software.

Jacquard is a small programming language designed for a regime in which most code is written by machine-learning models and reviewed by people.

An actor-based systems language that compiles to readable C. Native, no VM, no garbage collector.

Operating system written in Erlang and Rust

SQL over RPC, safely

Sandboxed plugin VM with typed capabilities, deterministic replay, and time-travel debugging — written in Rust.

Native Rust runtime for adversarial JavaScript/TypeScript extension workloads: native-only core execution (no V8/JSC/QuickJS), deterministic replay of high-impact decisions, and Ed25519-signed evidence for every containment action. Research-grade; automation ships advisory-only.

A scripting language for cowboy coders

Open-source, self-hosted AI agent for terminal, Telegram and Raspberry Pi. Local Ollama or Claude/Codex workers, enforced by a deterministic capability kernel, scoped approvals and an audit trail.

A local, open-source capability gateway for AI agents — one AI-native self-describe endpoint so any agent can discover, understand, be granted, and call the software on your machine, under a trust model you can see, scope, and revoke.

SexOS — a ~128 KB Rust microkernel built around a single address space, capability IPC and PKU isolation.

Electron runtime layer providing protocol-based separation, component assembly, and capability-based process control.

AegisIDE: capability-secured agent development environment for local AI models. Rust.

A statically-typed scripting language and bytecode VM for sandboxed execution of AI-generated code, built in C++ with no GC or JIT.

KAIROS-ARK is a high-performance, Rust-based Agent Runtime Kernel built for industrial-grade reliability. It delivers sub-100µs dispatch latency, event-sourced deterministic replay, and kernel-enforced capability sandboxing, bridging Python prototypes and production AI systems.

A batteries-included Crystal framework for desktop: native WebView windows, typed IPC, capability security, multi-window lifecycle, native plugins, and a CLI that scaffolds, runs, builds, and packages your app.

A default-deny authorization firewall for AI agents and MCP servers, enforcing capability-based security policies across tools, files, network, and system commands.

Execution governance for AI agents: signed action-bound decisions, Hosted effect mediation, replay resistance, and evidence-scoped isolation.

Agent-first display server: a small trusted core speaking a capability-native protocol, with every legacy app confined to its own per-app shim. Humans and AI agents operate the same GUIs under revocable, capability-scoped authorization.

A programming language that reads like English — and can't touch your machine unless you say so. Capability sandbox, pattern matching, gradual types. pip install she-lang