Memory survives sessions and restarts.
Persistent sessions, canonical save, native recall, and signed terminal outcomes preserve useful context beyond one conversation.
State that keeps its receipts.
AIMOS is a local-first security and continuity runtime for stateful AI agents. It governs the paths to remember, recall, mutate, and act, with a cryptographic trail across identity, origin, authority, provenance, tool use, and durable outcomes.
What AIMOS provides
Persistent state.
Governed end to end.
The runtime treats identity, origin, authorization, memory, retention, provenance, and evidence as parts of the same agent-state lifecycle.
Evidence travels with the memory.
Origin Binding derives and commits source, family, principal, and action evidence with the retained record.
Unsafe context stays out of active use.
Provenance verification, epistemic classification, Canary controls, and disclosure policy govern what recall may expose.
Maintenance has its own identity.
A separate Housekeeper identity owns scheduling, consolidation, and authorized mutation without impersonating the user.
One canonical brain
One authority path.
No privileged shortcut.
HTTP, MCP, sessions, autonomous work, and tool outcomes converge on canonical owners. Applications do not receive direct database authority.
- 01Signed external requests bind identity and exact action.
- 02Canonical content remains immutable after admission.
- 03Retrieval weight may change only through bounded, signed transitions.
- 04Attempts and denials remain inspectable alongside successes.
Agent or application
Presents a signed certificate envelope.
ExternalIdentity and authority
Verifies who may perform the exact action.
BoundSave and recall
Runs through canonical native owners.
GovernedEvidence and upkeep
Retains outcomes, lineage, and maintenance actions.
SignedThe product boundary
A control plane.
Not a model.
Clear boundaries keep the public claim honest and the integration surface useful.
A local-first agent security runtime.
Local HTTP and MCP surfaces let agents and applications use the same governed owners for authority, state, and evidence.
A graphical agent application.
AIMOS sits underneath the interface. It does not replace the agent, model, IDE, or product using it.
That an authorized source told the truth.
It verifies retained bytes, authority, ordering, and transitions—not the factual truth of every assertion.
AIMOS 1.0.5
Run the memory layer
on your own machine.
The current source release supports Intel and Apple silicon Macs running macOS 14 or later.