Shadow-execute first. Verify the diff.
Commit to reality.
Shadow execution runs each intent in a sandbox. Zero side effects until verified.
Policy engine assesses risk. Blast radius analysis traces transitive impact.
Merkle-chain logging. SHA-256 hash linkage. Tamper-evident by design.
Every action flows through a structured pipeline. Each step can halt execution.
Explore every possible future in parallel sandboxes. Score across six dimensions. Commit only the winner.
Define policies with a human-readable DSL. Five built-in factors catch dangerous patterns automatically.
// Block destructive operations DENY WHEN action MATCHES "delete_*" // Require approval for high risk REQUIRE_APPROVAL WHEN risk.score GT 75 // Warn on production surfaces WARN WHEN surface.name CONTAINS "prod" // Allow trusted actors ALLOW WHEN actor.trust == "full"
pay, charge, refund, transfer
delete, remove, drop, destroy
password, token, key, credential
surface name contains "prod"
send, email, notify, publish
Dependency-injected. Adapter-driven. Fully composable.
Minimal dependencies. Maximum safety.
import { createAosp } from 'aosp'; const { kernel, policy, temporal, trace } = createAosp(); // Register a target system kernel.registerSurface({ id: 'my-fs', type: 'filesystem' }); // Execute with full 10-step lifecycle const result = await kernel.execute({ action: 'write_file', surface: 'my-fs', params: { path: 'hello.txt', content: 'Hello, AOSP' } });