Codegeist OS

Codegeist OS is the workspace for an AI-focused Linux distribution built around a separate, non-root, least-privilege AI user alongside the normal human user.

Purpose

The project will define an operating system in which AI-assisted actions are explicitly constrained by identity, policy, human approval, and auditable system boundaries. Access to human data, credentials, devices, processes, networks, and privileged operations must be granted deliberately and remain revocable.

codegeist-llm is the intended source of a compact local model artifact. This repository owns operating-system integration, isolation, permissions, service lifecycle, updates, rollback, and recovery. The model repository owns model selection, provenance, evaluation, and artifact requirements.

Current Boundaries

• No Linux distribution base has been selected. NixOS is one candidate to be evaluated against explicit criteria.
• No OS image, installer, package set, service, AI-user implementation, policy engine, or privilege broker exists yet.
• No inference runtime, model packaging format, or hardware target has been selected.
• Human approval and privilege escalation are design requirements, not currently implemented security controls.
• This repository is public through its GitHub mirror. Do not commit private planning material, credentials, personal data, or restricted artifacts.

Documentation

• docs/architecture.md defines the current identity and integration boundaries.
• docs/security.md defines least-privilege, approval, isolation, audit, rollback, disablement, and recovery requirements.
• docs/base-system-selection.md defines neutral criteria for selecting NixOS or another Linux base.
• docs/memory-bank/chat.md records compact current project state.

Workspace Kits

.devcontainer/ and .opencode/ are Git submodules that track the release branches of the shared Codegeist development and agent kits. Initialize them from this repository with:

git submodule update --init .devcontainer .opencode

Hosting

Gitea at git.codegeist.ai is the primary write target. GitHub at github.com/codegeist-ai/codegeist-os is a public push mirror of Git refs. Issues, pull requests, secrets, permissions, and other platform state are not automatically synchronized.

License Status

No project or distribution license has been selected. Base-system, package, model, firmware, driver, and image-distribution rights must be reviewed before a build or release is produced.