AegisOS.
A Rust-first, secure, offline-first AI operating system for the disconnected edge — an integrated hardened OS base, built-in data fabric, encrypted storage, local AI, and AegisLink, a multi-path offline communication engine. Modern systems assume the internet exists. AegisOS assumes the internet may not exist.
The network degrades gracefully.
Cloud when available. Local-first when disconnected. Mesh when infrastructure is down. RF when distance matters. Store-and-forward when nothing is reachable. Cryptographic verification always.
Canonical topology: 4 clusters of ~25 devices — a 100-device off-grid deployment. Honest physics note: AegisOS is internet-independent, not physics-independent.
Every transport is hostile.
Sealed device and operator identities. A hash-linked, signed, append-only timeline. A content-addressed encrypted vault that sends ciphertext-only to MinIO. Nothing is trusted because it arrived — it is trusted because it verifies.
- BLAKE3Content addressing and hash-linked event chaining across the timeline and vault
- Ed25519Device and operator signatures on every event and message
- XChaCha20-Poly1305Authenticated encryption for vault objects and transport frames
- Argon2idOperator key derivation from passphrase
- zeroizeKey material wiped from memory after use
One node, one identity.
A node is one machine with a cryptographic identity, running a profile-selected subset of the seven pillars — from the AegisCore skeleton up through the AegisLink nervous system, the AegisData Fabric memory, the vault, the ledger, local intelligence, and the console.
- Control-plane / data-plane split — plaintext never leaves the client.
- Profiles select which pillars a node runs; identity stays constant.
- Structura is vendored as the evidence substrate — governed decisions, not loose files.
What the crates deliver.
aegis-crypto
The trust root: BLAKE3, Ed25519, XChaCha20-Poly1305, Argon2id, and zeroize — one audited surface for every hash, signature, and cipher in the system.
aegis-identity
Sealed device and operator identities. Keys are generated on-node, sealed at rest, and every action traces back to a cryptographic identity.
aegis-timeline
A hash-linked, signed, append-only event log. History can be extended but never rewritten — tampering breaks the chain visibly.
aegislink-private
mDNS discovery plus signed, encrypted node-to-node messaging with delivery receipts, a store-and-forward outbox, and evidence sync — no server anywhere.
aegis-vault
Content-addressed encrypted storage with BLAKE3 deduplication. The same bytes are stored once, addressed by hash, and sealed before they land anywhere.
aegis-store
Filesystem and S3/MinIO backends behind one interface, with hand-rolled SigV4 signing — no AWS SDK in the dependency tree.
aegis-data
Turns raw files into governed Structura Decisions — evidence with locators and provenance, not loose blobs.
aegis-ai
Offline grounded RAG: lexical + semantic retrieval with an optional local LLM via Ollama. Answers are cited — and it declines rather than fabricates.
aegis-api + console
A live local API and an offline web console: the node's control surface works with zero internet, served from the node itself.
Working early-stage prototype — Phase 1 of a Phase 0–7 roadmap. A real node boots today in QEMU: sealed identity, supervised agent, live API, offline console, and a signed 26-event tamper-evident timeline. The full data fabric, RF/LoRa transports, and desktop console are designed in depth and land in later phases.
“Cloud when available. Local-first when disconnected. Cryptographic verification always.”