Cybou
Stop wrapping probabilistic LLMs in vulnerable shell scripts. Cybou is the open-source, agent-native cognitive substrate built entirely in pure Rust for Debian 13 Linux: a deterministic local control plane (Mind), kernel-enforced agent capsules (Agent1), two-phase action governance, and a tamper-evident cryptographic event ledger. 100% local-sufficient with zero cloud dependencies.
Welcome to CYBOU
A sovereign cognitive runtime. Built for engineers.01 · Interface & Substrate
CPU load, memory pressure, I/O latency, filesystem inodes, open descriptors, and declared systemd services stream continuously into a tamper-evident SHA-256 hash-chain Journal. Findings carry verifiable evidence rather than probabilistic LLM assertions.
A GPU-accelerated Leptos/WASM spatial interface delivering 20+ specialized cards (Shell, Files, Cognitive Graph, System Monitor, Notes) with sub-millisecond responsiveness on an infinite 2D canvas.
AI agents execute in strictly unprivileged sandboxes bounded by Linux cgroups v2, Landlock LSM, mount namespaces, and mediated egress under declarative operator profiles.
Append-only SQLite v3 journal with SHA-256 hash chaining, causal ordering, and crash-safe transitive cryptographic erasure (ADR-0028).
02 · Governance
Cybou strictly decouples proposal from execution. Autonomous agents and users formulate typed action proposals. Mind evaluates them against standing security policy and empirical evidence, issuing single-use permits to Executor1. True physical outcomes are independently re-observed by telemetry.
Typed ProposalClosed schema operations from a verified protocol set, never raw unmonitored shell strings.
Policy EvaluationEvaluated against empirical findings, operator risk rules, and capability budgets.
Independent OutcomePhysical effect is confirmed by telemetry re-observation before commitment to history.
Substrate telemetry
Active · Verified Mind Control Plane
Kernel sandboxing & capsules · active
Cryptographic ledger · 46k+ events
bash scripts/gate.sh03 · Engineering Progress
The platform integrates 14 isolated D-Bus micro-daemons, PAM credential separation, per-UID unprivileged host file sockets, sandboxed shells, lifelong learning gates, and persistent sovereign storage. Tested across 88+ automated test suites.
14 Isolated Mind micro-daemons with typed D-Bus interfaces
Automated CI & deployment gates: format, clippy, unit tests, and live-bus KVM validation
Pure Rust workspace with strict safety guarantees and zero synthetic fixtures in production
04 · Spatial Model
An infinite 2D spatial plane where cards, decks, relations, and system insight live together without overlapping window chaos.
Cards and decks snap to dynamic layout guides with instant zoom, collapse, and multi-mode arrangement.
Lightweight, responsive WebAssembly rendering ensuring distraction-free spatial operation.
05 · Core Invariants
AI models are replaceable statistical faculties. Memory, identity, and system invariants stay persistent and local.
Agents operate inside Linux cgroups v2, Landlock LSM, and namespace sandboxes with explicit resource budgets.
Zero telemetry, zero remote tracking, and 100% offline local sufficiency.
Every cognitive belief is backed by verifiable host telemetry and cryptographic ledger evidence.
06 · Roadmap & State
Implemented & Tested
Implemented & Tested
In Active Development
In Active Development
07 · Architecture FAQ
Cybou is an open-source, sovereign agent-native operating environment and spatial desktop in active development, built in 100% Rust for Debian 13 Linux. A persistent, deterministic local control plane called Mind continuously observes and governs the host machine, while autonomous agent capsules, models, and tools remain strictly sandboxed and replaceable.
No, Cybou is currently in active pre-release developer preview. The core Mind control plane, cryptographic ledger, Living Canvas desktop, and kernel-isolated agent capsules are fully operational in development and laboratory environments. It is intended for developers, researchers, and sovereign infrastructure builders.
A model is not Mind. An agent is not Mind. Tool access is not permission. Conventional AI assistants collapse memory, identity, execution, and security into a single probabilistic LLM prompt. Cybou establishes an explicit zero-trust architecture: memory, identity, health, lifecycle, and recovery are separate D-Bus micro-daemons. AI agents run in kernel-enforced sandboxes (cgroups v2, Landlock LSM) and can only propose actions that pass strict policy validation.
No. Cybou is local-sufficient by design: core cognition, identity, biography, meaning parsing, and the Living Canvas desktop require zero cloud connectivity, no GPU accelerator, and no external API keys. It collects and sends zero remote telemetry.
Living Canvas is a high-performance spatial desktop interface built entirely with Leptos and WebAssembly (Rust). It communicates over a secure Axum web gateway with typed JSON and real-time event streams, providing 20+ specialized cards including a sandboxed shell, unprivileged host file manager, cognitive graph, and system telemetry.
Cybou enforces a strict two-phase Action1 / Executor1 governance pipeline: agents or users propose typed actions; Mind evaluates governance policy against empirical evidence and issues an opaque single-use permit; cybou-executord carries out the physical effect; and telemetry independently re-observes the true outcome. If telemetry does not confirm success, the action is marked failed and committed to the hash-chained Journal.
Cybou code and documentation are licensed under the MIT License. Original visual assets are licensed under Creative Commons CC BY-SA 4.0. The repository is 100% compliant with the REUSE specification.
Experience Sovereign AI
Schedule a personalized demonstration of the 14-daemon Mind runtime, kernel-enforced agent capsules, Leptos/WASM spatial desktop, and the cryptographic Event1 ledger on Debian 13.