3. Build

July 23, 2026 · View on GitHub

AOHP: Android Open Harness Project

Let the OS proactively adapt to its user via agentic AI.

Demos Paper License

WeChat Discord X

中文文档 · Development Guide · 开发指南

🎬 See Demos: Watch AOHP generate personalized user-defined apps and complete cross-app tasks.

Why AOHP?

Traditional OS puts apps at the center. Users navigate developer-defined app interfaces to do everything, which may be tedious and distracting.

AOHP shifts the OS toward deeper personalization. It introduces user-defined apps, which are generated based on the user's actual needs and are backed by AI agents under the hood. The agents use system APIs, CLIs and GUI-based apps in the background to compose actual services.

To make such experience feasible, efficient and secure. Many components in the system and framework layers have to be redesigned, but not all. That's why we introduce AOHP, an OS-level agent harness to enable personalized, efficient and secure interaction.

Traditional Android vs AOHP architecture

Important

AOHP is an early-stage research prototype. It is not ready for production deployments or security-critical workloads.

We will keep improving the reliability, compatibility, and security coverage. Feedback and contributions are welcome.


Design

AOHP features a set of efficient agent interfaces and a secure information flow tracking mechanism, which together foster the core capabilities to enable personalized service composition. The system architecture:

AOHP System Architecture

A comparison between AOHP and stock Android:

DimensionStock AndroidAOHP
Interaction ModelUsers operate app-defined workflows directlyAgents act as first-class OS actors under user intent
Interaction SurfaceFixed app GUIs defined by developersPersonalized service entrances mediated by agents
Process ExecutionSingle-tenant foreground execution bound to physical displaysParallel background interaction decoupled from the screen
System MemoryFragmented and locked inside individual applicationsOS-managed cross-app memory for task personalization
Security & PrivacyCoarse-grained app permissions and opaque data flowsFine-grained data-flow tracking and sandboxed sensitive values

🎬 Demos

AOHP ships as a runnable AOSP fork. The recordings below come from the compiled system image.

User-Defined Apps

Given a natural-language prompt, AOHP produces a fully-functional app, including the frontend UI and background logic supported by agents.

Health Hub
Unified Fitness & Sleep Dashboard
Gift Picker
Luxury Gift Recommendation for 520
Python Learning Assistant
Kid-Friendly Programming Tutor
Health Hub demo Gift Picker demo Python Learning Assistant demo
Aggregate fitness, sleep, and weight records from different apps into a unified health management app. Generate a luxury gift selection app for my anniversity. Find gift information from all shopping apps. Generate a Python learning app for my child. Include courses and exercises. Track progress and report to me via messages every day.

Agent Execution

AOHP provides personalized services by orchestrating APIs, CLIs, GUIs, memory, skills, etc. with AI agents.

UI Micro-operations File Handling Event Capture
Gallery brightness demo Cloud file Markor demo Event Capture demo

Evaluation Highlights

We evaluate AOHP with OpenClaw against stock Android. The benchmark has 30 real-world mobile tasks. They cover GUI operation, non-GUI operation, event capture, multi-source retrieval, memory management, and hybrid workflows.

Task Completion

Each task is scored by objective checkpoints, so partially completed tasks still receive partial credit.

SettingCompletion RateFully SolvedPartially Completed
OpenClaw on stock Android54.44%13 / 307 / 30
OpenClaw on AOHP75.56%20 / 305 / 30
Gain+21.12%+7 tasks-

Execution Cost

To compare cost fairly, we report the 11 tasks that both systems solve completely.

SettingTool CallsDurationTokensLLM Requests
OpenClaw on stock Android23333.94 min7.10M273
OpenClaw on AOHP12918.93 min3.44M143
Reduction44.64%44.21%51.55%47.62%

Information-Flow Security

AOHP is also evaluated with security-oriented test cases. The system enforces all five policy cases:

Security CheckResult
Sensitive display uses vault references, not plaintextPass
Ordinary non-sensitive actions proceed without extra approvalPass
Sensitive transfers and payment confirmation require user consentPass
Unsupported access fails closedPass
Sensitive events are redacted and preserve taint metadataPass

Getting Started

AOHP is built on AOSP. This repository hosts project documentation and the unified development framework. Source trees live in the aohp-os GitHub organization and are pulled in via local_manifests.

Quick start

# 1. Clone the dev framework
git clone git@github.com:aohp-os/aohp.git
cd aohp

# 2. Initialize AOSP + AOHP manifests (Android 16 QPR2; see guide for mirror/proxy options)
cd AOSP && repo init -b android16-qpr2-release
cd .repo && git clone git@github.com:aohp-os/local_manifests.git && cd ..
repo sync -j4

# 3. Build
bash scripts/build.sh

# 4. Launch Cuttlefish (after envsetup + lunch)
source AOSP/build/envsetup.sh
lunch aosp_cf_x86_64_phone_aohp-trunk_staging-userdebug
sudo -E bash -c 'ulimit -n 65536; '"$ANDROID_HOST_OUT"'/bin/launch_cvd --report_anonymous_usage_stats=n' &

Open the emulator at https://localhost:8443/.

Full development guide

Setup, networking, multi-instance Cuttlefish, sandbox options, and contribution workflow are documented in Development Guide.

You can also clone this repo for project overview and updates:

git clone https://github.com/aohp-os/aohp.git

License

AOHP is licensed under the Apache License, Version 2.0.


Citation

@misc{zhao2026aohp,
      title={AOHP: An Open-Source OS-Level Agent Harness for Personalized, Efficient and Secure Interaction}, 
      author={Shanhui Zhao and Jiacheng Liu and Guohong Liu and Jichao Yan and Jialei Ye and Yuhao Yang and Hao Wen and Shizuo Tian and Yizhen Yuan and Yuxuan Chen and Yunxin Liu and Ju Ren and Ya-Qin Zhang and Chao Huang and Yao Guo and Yuanchun Li},
      year={2026},
      eprint={2606.23449},
      archivePrefix={arXiv},
      primaryClass={cs.AI},
      url={https://arxiv.org/abs/2606.23449}, 
}

The OS is no longer only a substrate for human-operated applications — it becomes the environment in which agents perceive, plan, act, and enforce user intent.