AOS Community Edition (Unicity AOS) is an agent operating system: an environment in which agents and agent-native software run, built to be inspected and composed. It ships a product CLI, an HTTP API, a community distribution, 22 first-party capsules, a provider and model experience, and Unicity Audit, on top of the Astrid runtime.
Capsules are the user-space building blocks. You compose them into harnesses, meta-harnesses, connectors, services, or other systems. The bundled Forge tooling lets a fresh agent inspect the running system, learn the capsule model, find a capability gap, and build and verify a least-privilege capsule. Forge also installs a meta-harness skill that teaches an agent to treat its instructions, memory, skills, harness code, tools, capsules, traces, and evaluations as a world it can improve.
AOS exposes itself to coding agents as an MCP server shared by Codex, Claude, and Grok. When a client cannot render MCP approval forms, a native local dialog on macOS, Windows, or Linux collects the approval, and it accepts only a boolean or a fixed approval choice, never free text, passwords, or URLs.
Releases are signed and carry checksums, Sigstore bundles, and GitHub build-provenance attestations, with stable, dev, and nightly channels. A principal model keeps the authenticated operator separate from the environment it provisions, and existing standalone runtime state can be imported without changing the source.
Features
- Capsules: composable user-space building blocks for harnesses, connectors, and services, with 22 first-party capsules included
- Forge: construction tooling that lets an agent find a capability gap and build and verify a least-privilege capsule
- Meta-harness skill: teaches an agent to improve its own instructions, memory, tools, and evaluations as a governed world
- MCP server: one product edge for Codex, Claude, and Grok, with native approval dialogs when a client lacks form elicitation
- Unified CLI and HTTP API: a single command surface over the pinned runtime, plus an HTTP API and daemon mode for process supervisors
- Signed releases: checksums, Sigstore bundles, and build-provenance attestations, with authenticated update checks across stable, dev, and nightly channels
- Principals: provisions environments for other principals while keeping the operator identity separate
- Runtime import: copies compatible state from a standalone runtime installation with integrity checks
