The deterministic gate at the heart of every agent: the same input always yields the same decision, fully replayable — no hidden randomness in the loop.

Coming soon.

A live, three-dimensional interpretability surface — watch agent decisions, memory writes, and bus traffic, replayable.

A design in a pending patent claim, not a shipped capability: routing work across quantum, classical, and local compute.

Run Windows apps (via Wine), containers, Flatpak apps and retro game ROMs alongside native Linux programs.

Designed, not yet in the shipped build: each binary's sandbox tier would be chosen from where it came from — signed, AI-generated, user-uploaded, or unknown.

Multi-model, multi-style image generation, fully agent-scriptable.

An audio studio that runs on your machine. Music generation is not available yet: its model is not included in the OS image.

Agentic video generation — script, storyboard, render, and lip-sync a film on your own machine.

Markerless motion capture from a single webcam — no suit, no markers.

In development: presence sensing from Wi-Fi signals, using add-on sensor boards.

1,450+ public APIs across 50+ categories, with recipe scheduling, behind one sovereignty-scored gateway.

A versioned master prompt library — prompts treated as first-class, ownable artifacts.

For device-to-device messaging, which is in development: fixed-size cells erase the size-based metadata that ordinary encryption leaks.

For device-to-device messaging, which is in development: messages split via Shamir K-of-N over GF(256), so K cells reconstruct and K-1 reveal nothing.

For device-to-device messaging, which is in development: HKDF-derived routing lets relays move cells without linking them to a conversation.

For device-to-device messaging, which is in development: the HYVE ratchet rotates keys, designed so a compromise does not unlock past traffic.

Eleven static-analysis detectors across five languages. Auditing its own source on every commit is a design in a pending patent claim.

Decoy traffic, a pluggable-transport Tor controller, and cross-platform kill in one defensive layer.

PIN, password and gesture unlock.

Constant-time credential verification with parallel Argon2id defeats side-channel timing attacks.

Designed for device-to-device messaging, which is in development: scan a QR token and two devices establish a ratcheted channel directly, with no account and no broker.

Your persona is threshold-sharded across the mesh; a duress signal silently shreds it.

A departure from your keystroke baseline can raise a silent duress signal — no button to press.

Inter-keystroke timing alone classifies your working state — no content is captured, only rhythm.

Peer-to-peer LAN file transfer with mDNS discovery and TLS pinning — no relay, up to 8 GiB per file.

Tax, Veteran, Identity, Records, Civil Servant, Compliance, Community, Emergency, Health, Legal, Discover, Translate, Small Biz, Student, and the Civic hub.

A constant-evaluation credential check before any civic surface accepts your documents.

Planned: operator-paced hardening — banner, audit, sysctl, MAC, strict, all — with every step reversible. Not in the shipped build yet.

Civic output is filtered through a redaction pass before it ever reaches the screen.

Continuous monitoring of regulation, jurisdiction, and court changes — alerts when your compliance drifts.

A two-tier key hierarchy, multi-organ topology, and a deterministic runtime.

Per-chunk Brotli + AES-256-GCM and an Ed25519-signed root hash you can verify.

On-device identity: an X25519 keypair and HKDF-scoped tokens.

The signaling relay URL is operator-configurable; the relay service is not public yet.

Seal evidence under a verifiable-delay-function gate that mathematically resists early opening.

Planned: a phased, operator-paced hardening installer designed to stay auditable and reversible at every step. Not in the shipped build yet.

A standalone binary that exposes Omega, Narrator, Augur, Trust, and Leaper as native MCP tools.

Per-IDE skill manifests for Claude Code, Cursor, and Continue — call HYVE organs from your editor.

Six plugin types — studios, organs, themes, recipes, surfaces, agents — manifest-installed on local ports.

1,450+ APIs scored by data exfiltration, jurisdiction, and free-tier availability before you wire them in.

Cross-tenant agent reputation: Omega can ask the network whether an agent has earned trust before delegating.

Generative requests adapt to the hardware they land on — capability caps applied at the shim layer.

Controls mapped today to the AICPA Trust Services Criteria; an independent audit is planned, not yet certified.

Health data you process with the OS stays on your machine. BAA requests are reviewed case by case; no standard agreement is published yet.

Data minimization by default. DPA requests are reviewed case by case; no standard agreement is published yet.

Read-only control mappings, with a phased federal-hardening installer planned — alignment, with no authorization claimed.

One source briefing, rendered for operator, command, allied, and public tiers with automatic per-tier redaction.

Threshold signing separates the binary from the policy, so either can be re-accredited independently.

One source is designed to produce a development build and a production build with LUKS2 + Secure Boot. The production build is not released yet; today's image installs with Secure Boot turned off.

A build-time HSV-transform pipeline generates 14+ complete themed icon sets from one canonical source.

Planned: a persistent service that subscribes to udev, matches your hardware, and installs drivers non-interactively. Not in the shipped build yet.

Browser, mail, and calendar preinstalled and configured — productive on first boot.