A modular operating system for AI agents. Build from sealed parts, swap them later, and keep every capability under control.
Unicity Astrid OS is a secure runtime for agents. A small, dumb kernel routes events, enforces capabilities, runs the sandbox, and records the audit trail. Everything an agent can do lives in a swappable WebAssembly capsule: the model, the loop, memory, tools, skills, and frontends. The runtime does not ask you to trust the prompt; it gives the agent only the authority you grant.
brew tap unicity-astrid/tap && brew install astrid
astrid init # choose a provider and install a capsule bundle
astrid doctor # verify the runtime, capsules, and LLM
astrid chat # start an agent sessionInstall Unicity Astrid OS from GitHub Releases, Homebrew, or source. The Unicity Astrid OS website runs a real kernel in the browser and is the best first tour of the system.
- One small, dumb kernel. It routes IPC, enforces capabilities, runs the sandbox, and holds no agent logic or tool schemas.
- Everything else is a capsule. Capsules are sealed WebAssembly processes with an explicit manifest. Replace a model, tool, memory, or frontend without forking the operating system.
- Power only narrows. Capabilities are signed, principal-scoped tokens, not prompt instructions. A helper can receive less authority than its caller, never more.
- Every sensitive action is accountable. Capability decisions and host effects land in a signed, hash-linked audit chain.
| Start with | Use it for |
|---|---|
| Unicity Astrid OS | Install and run the kernel, daemon, CLI, sandbox, capability store, and audit chain. |
| The Unicity Astrid OS Book | Understand the kernel, capsules, host ABI, event bus, and security model. |
| The Contributor Handbook | Navigate the polyrepo, contribution workflow, RFC process, and release standards. |
| sdk-rust | Build Rust capsules. |
| sdk-js | Build JavaScript and TypeScript capsules. |
Astrid is a polyrepo. The privileged runtime, author SDKs, public contracts, and reference capsules are separate repositories so each boundary is explicit.
| Repository | Role |
|---|---|
astrid |
The Unicity Astrid OS kernel: daemon, CLI, WebAssembly sandbox, capability enforcement, and audit. |
sdk-rust |
Rust SDK and bindings for capsule authors. |
sdk-js |
JavaScript and TypeScript SDK for capsule authors. |
wit |
Canonical typed contracts between the kernel and capsules. |
rfcs |
Proposals for changes to public contracts and the host ABI. |
capsule-* |
Reference capsules for files, HTTP, shell access, memory, sessions, providers, and more. |
oracles |
Governed host adapters for Claude Code, Grok Build, and Codex. |
astralis |
The flagship Unicity distribution: a curated Astrid capsule bundle. |
Astrid is an open-source Unicity project, dual-licensed under MIT and Apache 2.0. Browse awesome-astrid for projects built on the runtime, or start by writing a focused capsule for a single capability.