I’m building AgentOS [1], trying to experiment where agent substrates/sandboxes will head next. It's a deterministic, event-sourced runtime where an “agent world” is replayable from its log, heavy logic runs in sandboxed WASM modules, and every real-world side effect (HTTP, LLM calls, code compilations, etc.) is explicitly capability-gated and recorded as signed receipts. It ensures that upgrades and automations are auditable, reversible, and composable. The fun bit is a small typed control-plane intermediate representation (AIR) that lets the system treat its own schemas/modules/plans/policies as data and evolve via a governed loop (propose > shadow-run > approve > apply), kind of “Lisp machine vibes” but aimed at agents that need reliable self-modification rather than ambient scripts.

[1] https://github.com/smartcomputer-ai/agent-os

Ha. Nice name. Looks like we both are: https://github.com/saadnvd1/agent-os

We should talk! I have been doing pretty much the same, but have been leaning heavier on the context parsing and schema sharing between apps.

This is definitely interesting, seems like the sort of thing Nix would do well.