astrid-runtime/astrid

About

A portable, capability-secure operating system for composable software.

Astrid treats a component the way an operating system treats a process. Every ability is a sealed WebAssembly capsule: it can be composed with other capsules, granted only explicit authority, and replaced without expanding its reach. Astrid is independent of any particular product, model provider, agent loop, user interface, or distribution.

The kernel underneath is small and deliberately dumb. It routes events, enforces capabilities, runs the sandbox, and records the audit trail; it holds no model, tool schema, or business logic. A jailbreak, poisoned tool, or plain bug still cannot read a file, reach a network, or…

Excerpted from github.com/astrid-runtime/astrid