Agent OS Documentation

May 8, 2026 ยท View on GitHub

Welcome to the Agent OS documentation. Agent OS is a kernel architecture for governing autonomous AI agents with deterministic policy enforcement.

Quick Navigation

๐Ÿš€ Getting Started

GuideTimeDescription
5-Minute Quickstart5 minMinimal setup, maximum speed
30-Minute Deep Dive30 minComprehensive walkthrough
First Governed Agent15 minBuild a complete agent
Cheatsheet-Quick reference card

๐Ÿ““ Interactive Notebooks

Learn by doing with our Jupyter notebooks:

NotebookTimeDescription
Hello Agent OS5 minYour first governed agent
Episodic Memory15 minPersistent agent memory
Time-Travel Debugging20 minReplay agent decisions
Verification15 minDetect hallucinations
Multi-Agent Coordination20 minAgent trust protocols
Policy Engine15 minDeep dive into policies

๐Ÿ“š Tutorials

๐Ÿ—๏ธ Architecture

๐Ÿ”ง Reference

๐Ÿ“‹ RFCs

๐ŸŽฏ Case Studies


Installation

# Core package
pip install agent-os-kernel

# With all features
pip install agent-os-kernel[full]

One-Command Quickstart

macOS/Linux:

curl -sSL https://get.agent-os.dev | bash

Windows (PowerShell):

iwr -useb https://get.agent-os.dev/win | iex

Hello World

from agent_os import KernelSpace

kernel = KernelSpace(policy="strict")

@kernel.register
async def my_agent(task: str):
    return f"Processed: {task}"

# Run with kernel governance
result = await kernel.execute(my_agent, "analyze data")

Key Concepts

Kernel vs User Space

โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
โ”‚              USER SPACE (Agent Code)                    โ”‚
โ”‚   Your agent code runs here. Can crash, hallucinate.   โ”‚
โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
โ”‚              KERNEL SPACE (Agent OS)                    โ”‚
โ”‚   Policy Engine checks every action before execution    โ”‚
โ”‚   If policy violated โ†’ SIGKILL (non-catchable)         โ”‚
โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜

Signals

Agent OS uses POSIX-style signals for control:

SignalDescription
SIGKILLTerminate immediately (cannot be caught)
SIGSTOPPause for human review
SIGCONTResume execution

Policies

Policies define what agents can and cannot do:

policies:
  - name: read_only
    deny:
      - action: file_write
      - action: database_write

IDE Extensions

IDEStatusLink
VS Codeโœ… AvailableMarketplace
JetBrainsโœ… AvailablePlugin
Cursorโœ… AvailableExtension
GitHub Copilotโœ… AvailableExtension

Policy Templates

Pre-built templates for common use cases:

TemplateUse Case
secure-codingGeneral development
data-protectionPII handling
enterpriseProduction deployments
# Use a template
agentos init my-project --template secure-coding

Support


Kernel-level safety for AI agents.

GitHub ยท Examples