System online
Data residency
Capability-oriented OS

A next-generation operating system built on explicit authority, typed capabilities, and secure-by-design principles.

No ambient authority Only what you're granted.
Capability-oriented OS
No ambient authorityOnly what you're granted.
Typed capabilitiesSafe. Composable. Verifiable.
Privacy by designYou control what's revealed.
Passkey nativePhishing-resistant by default.
$ capos --status
capability-oriented OS · v0.2.0-alpha
kernel: ok · auth: standby · ledger: synced
$ capos --principles
1. No ambient authority.
2. Capabilities are explicit.
3. Every access is auditable.
4. Revocation is instant.
$ capos --tip
Sign in with a passkey for a cryptographic, phishing-resistant session.
awaiting authentication...
Capability-oriented OS
capOS
Sign in to capOS Remote workspace
or with credentials
Forgot password?
or continue with
No calls yet idle

Verify it's you

Enter the 6-digit code from your authenticator app

Didn't get a code? Resend

You're in.

Session established. Redirecting to your workspace…

Connection gateway ready
capOS
Current view Services
offline no session
Session logged out

Services

Default manifest and launch options

Chat

not loaded

Adventure

not loaded

Adventure controls not loaded
No Adventure output yet

Paperclips

not loaded

Paperclips controls not loaded
No Paperclips output yet

Default Manifest Services

not loaded

Service Catalog

Launch Options

No conversations yet Use Start (+) to begin a chat or redeem an invite. Discovery is scope-bound; the rail only lists chats your CapSet already grants.
Select a conversation

The chat panel is scope-bound to capabilities your session has been granted. Backend wiring is queued for the next iteration; for now the rail and panel are scaffolding only.

Session

Last refresh diff

CapSet

Name Interface Policy

Calls / Diagnostics

No calls yet

Results and remote denials appear here.

idle

          

Transcript

    capOS v0.2.0-alpha · us-east-1 · your authority, your decision
    browser receives DTOs only · Rust backend holds capabilities
    [LOCK] Secure connection established