GurtOS

Operating systems built for AI agents

Each agent task runs as its own Linux user, on its own copy of your files. It never holds your keys, it asks before it spends, and you can undo it without touching any other task.

Download GurtOSRead the docs

Preview release v0.2.0-preview, built on Ubuntu 24.04. It has not had a security audit, so use a spare computer or a virtual machine.

Watch the 3-minute video on YouTube: a task stops for an OK, a booby-trapped page is stopped, one task is undone and the power is pulled.

One core, three editions

Checksums, signatures and install steps

What the core does

  • Undo one task Each task writes to its own layer over your files. Undo drops that layer and keeps every other task's work.
  • Keys stay out of reach Keys live in a root-only vault. The box makes keyed calls for the agent, so a poisoned web page has nothing to steal.
  • Only the hosts you allow A task's network reaches the box's proxy and nothing else. The proxy lets through the hosts that task lists.
  • Pause for your OK Spending over the budget or your threshold stops and asks, on the screen or your phone. Other tasks keep running.
  • Pull the plug After a power cut, the box rebuilds every task from its log and carries on where it stopped.
  • Every step logged One append-only action log of each step, tool call, approval, cost and blocked connection.

Open source under the Apache License 2.0 on GitHub.