Portable Agent OS

Public portable coreApache-2.0

Intent in.
Evidence out.

A capability-aware control layer for local agent workflows. It makes authority, host support, lifecycle changes, and recovery inspectable instead of implicit.

Preview the install Read the architecture

Pre-release. Native Windows is the currently qualified platform.

CONTROL ROUTE / 001LOCAL
  1. 01IntentClassify the task
  2. 02CapabilityName host support
  3. 03AuthorityPreview before apply
  4. 04EvidenceReturn a bounded receipt
  5. 05RecoveryRestore exact prior state

contractagent-os/1verified path

One command. Zero mutation.

See the plan before the system touches your home.

Use a verified checkout or source release. Python 3.11+ is required.

PowerShellmutation-free preview
python install.py --dry-run

Apply only with explicit authority: python install.py --yes

Illustrative browser demo

Follow one operation from request to recovery.

This walkthrough changes only the example receipt below. It does not execute commands or access your machine.

classified
preview / intent
Current decision

Inspect the requested outcome

The gateway names the task, host, and smallest useful capability set before execution.

capability
routing
authority
read-only
result
bounded task contract
{
  "stage": "intent",
  "decision": "classified",
  "mutation": false
}

Inspectable boundary

The public core is useful because its limits are explicit.

PUBLIC / INCLUDED

Portable core

Contracts, host adapters, lifecycle commands, governed packages, verification, and the optional Operator Layer.

  • Codex, Aider, generic adapters
  • Install, doctor, update, recover, uninstall
  • Capability states and deterministic receipts

AUTHORITY / EXPLICIT

Control boundary

Preview, approval, policy, transaction journals, evidence bindings, and exact recovery separate intent from mutation.

PRIVATE / NOT BUNDLED

Your overlay

Memory, project graphs, sessions, credentials, personal policy, runtime state, and private skills stay outside the repository.

Capability-aware by contract

No host support by implication.

Codexsupported pathGlobal instruction connection and managed runtime
Aider + local Ollamaproved pathSeparate runtime proof and adapter contract
Generic instructionsdegradedPortable file export without host-native lifecycle hooks

Exact versions and limits live in Host support.

Start with proof

Clone it. Preview it. Inspect every boundary.

The repository is a pre-release candidate. Try it in a disposable environment and bring concrete failures to the issue tracker.

Open on GitHub Read quick start