Demo hardening
Shipped when built and tests passed.
v1.2.0 · Quiet Open-Core
Mode A public baseline: Enforcement Kernel.
ActantOS v1.2.0 freezes the self-host Enforcement Kernel under Quiet Open-Core — installable, API-frozen, and locally verified. Stage 3 / v1.1.0 is not the Mode A public maturity baseline.
v1.2.0 · Quiet Open-Core · Mode A public baseline · locally verified
Stage 1 complete — tests are the gate
After the version ladder from demo hardening through Quiet Open-Core, v1.2.0 is the Mode A public cut: the Enforcement Kernel — installable, API-frozen, and green under automated tests. Ship criterion: built and tests pass means done. Semantic version is not production qualification.
Stage 1 is the Enforcement Kernel every later feature depends on. Stage 2 control-plane surfaces may be locally implemented. Stage 3 governed-autonomy contracts and full multi-tenant managed SaaS packaging are future or Mode B conditional — not claimed as the current free public baseline.
Ship proof
Verified release path
- Artifact tagv1.2.0
- MaturityQuiet Open-Core
- API contractFrozen /v1
- ValidationLocally verified
- Policy pathBalanced default
- InstallSelf-host free
Journey
Version path to Quiet Open-Core
MCP hardening
Shipped when built and tests passed.
Self-host alpha
Shipped when built and tests passed.
Policy & budget
Shipped when built and tests passed.
Security beta
Shipped when built and tests passed.
Pilot readiness (eng)
Shipped when built and tests passed.
Quiet Open-Core ship
Shipped when built and tests passed.
Portable agent test
Shipped when built and tests passed.
Agent Runtime Control Plane
Shipped when built and tests passed.
Stage 3 Governed Autonomy (future / conditional)
Not Mode A public baseline. Future or conditional until productization and claim policy allow.
Capabilities
What's inside the kernel
Fail-closed enforcement
No tool action executes without an ActantOS Decision. Adapters hard-fail when the control plane is unreachable.
Deterministic policy
Cedar + risk rules return allow, deny, or approval_required — not LLM-as-judge.
Human-in-the-loop approvals
One-use, TTL-bounded web approvals with optional Slack. Replay is denied.
Pi Primary Path
Coding agents via guarded tools: the pilot-gating path for real developer workflows.
MCP Optional Path
Configure MCP clients through ActantOS for list filtering, call intercept, drift, and SSRF controls.
Evidence you can export
Hash-chained audit timelines plus session evidence packages for self-host review.
Docker self-host
Compose-backed install with sandbox baseline, kill switch, budgets, and rate limits.
Frozen /v1 API
Stable intercept, tool-result, operator, and MCP transport surface for integrators.
Demo story
Decision loop in one run
Fresh-install smoke exercises the full Pilot Workflow on the Pi primary path.
Safe workspace read
Decision: allow
Credential / .env read
Decision: deny
git push (side effect)
Decision: approval_required
After one-use approval
Decision: allow + token
Kill switch armed
Decision: deny next action
Evidence export
Decision: audit package
Open-core boundary
Free surface vs later platform
Self-host free surface
Everything needed to govern agents on your infrastructure under Quiet Open-Core v1.2.0 (Mode A):
- Enforcement Kernel (actantosd decision API)
- Cedar policy bundles + risk rules
- Docker sandbox baseline
- Pi guarded adapter path + optional MCP gateway
- Web approval + optional Slack
- Basic operator dashboard
- Kill switch, budgets, rate limits
- Hash-chain audit + local evidence export
Later / paid platform
Intentionally out of Mode A Quiet Open-Core v1.2.0 — future or conditional roadmap, not ship blockers for the self-host kernel:
- Stage 3 multi-tenant foundation (conditional; not Mode A public baseline)
- Fail-closed gVisor isolation contract
- STS credential broker
- Signed WORM-style Object Lock evidence archives
- Durable SIEM webhook / Splunk HEC connectors
- Full multi-tenant managed SaaS packaging
- Firecracker microVM runtime (gVisor/runsc is the intended hardened path)
- Enterprise memory vault
- SCIM directory provisioning
Claim discipline
What we say — and what we don't
Capability ships when built and tests pass
Not yet claimedUnimplemented features sold as current
Self-host Enforcement Kernel complete (Quiet Open-Core v1.2.0)
Not yet claimedHosted multi-tenant SaaS finished without code
Stage 2 Control Plane may be locally implemented (ops, channels, OIDC, hosted path)
Not yet claimedStage 3 / v1.1.0 as Mode A public maturity baseline
Locally verified open-core decision loop on self-host
Not yet claimedProduction-qualified multi-tenant enterprise platform without Mode B evidence
Get started
Install v1.2.0
Quickstart
# Clone and test the open-core kernel
git clone https://github.com/kotobuki09/actantos-releases.git
cd actantos-releases/actantosd
npm run quickstart