aos-ce

Why we included this project

AOS Community Edition is what you reach for when agents need to run as inspectable, repeatable workloads instead of one-off scripts. The `aos` CLI and its HTTP API handle provisioning and updates, then keep workspaces supervised in the background. The source tree ships 21 first-party capsules you can assemble into the connectors and services your setup actually needs. Security centers on least-privilege boundaries: MCP interactions pass through a local approval surface, principals stay separate from the target environments they touch, and every release is pinned and signed, with runtime compatibility checks deciding what can publish. There's also a Forge tool that lets an agent inspect the running system and build new capability capsules on its own, useful if you want agents to extend their own tooling safely. If you're weighing a controlled runtime for an agent fleet against rolling your own orchestration, this is a concrete, auditable base to judge from.