AOS Community Edition is an open agent operating system that provides an inspectable, composable environment for agents.
The tool addresses the need for a transparent, controllable platform where agents can operate with clear visibility into their actions and composition. It achieves this through a unified product surface built around the `aos` CLI, which owns specific command boundaries and ensures consistent behavior across installations. The system enforces strict runtime compatibility through machine-readable configuration and upgrade gates that must pass before any release can be published. Installation provisions a pinned runtime and exactly twenty-one first-party capsules from the source tree into a product-versioned root, with support for offline initialization and coordinated upgrades that preserve existing standalone runtime installations.
Developers should choose this tool if they need an agent platform with strong auditability and explicit control over agent capabilities and interactions. It suits projects where transparency in agent behavior is non-negotiable and where composability through capsules matters more than maximum flexibility. The tool is particularly relevant for integrations with MCP-compatible clients like Codex, Claude, and Grok, where it provides a local decision surface for approval flows with strict constraints on what information can be collected.
The project maintains rigorous release discipline, with every release publishing checksums, Sigstore bundles, and GitHub build-provenance attestations alongside runtime-compatibility metadata. Release validation compares the pinned runtime's command inventory against the product's classified root contract, preventing undeclared runtime verbs from entering releases. The tool applies consistent product-owned behavior across Unix and other platforms through its daemon implementation, which replaces the AOS process while preserving signal and exit-status ownership for process supervisors. Development activity shows careful attention to the boundary between product-owned commands and lower-level runtime functionality, with explicit inherit-or-own decisions required for any new verb.
