01
Living Canvas
One Rust/WebAssembly frontend, compiled from a single source, delivered as a content-hashed artifact from the same origin as its own API.
Pre-release · Rust/WebAssembly migration in progress
A system that remembers.
A mind that stays in charge.
Cybou is an experimental agent-native operating environment. Twelve local services give it durable memory, identity, health, and recovery — and one Rust/WebAssembly interface renders it in a browser or a desktop shell. No shipped model, no required cloud.
Reproducible foundation
Rust · WebAssembly
Typed local runtime
Zero Telemetry
Concept preview
Stable
Welcome to Cybou
A quiet system, ready when you are.Generation 147System is healthy
Interactive interface concept — click the Cybou mark
01 · Interface
One interface.
Two surfaces.
The same Rust/WebAssembly frontend runs in an ordinary browser and in a minimal desktop shell that owns a single Wayland surface. The interface is a projection of Mind, never a second owner of state — which is why it can be replaced without touching memory, identity, or policy.
A read-only boundary
The gateway binds to loopback, answers typed session, snapshot, and event requests under a bounded budget, and exposes no mutation route at all.
Designed as a system
Color, geometry, motion, login, and wallpaper share one coherent visual grammar in both dark and light.
02 · Foundation
Declarative by nature.
Reversible by design.
Underneath, Cybou inherits reproducible configuration and generation rollback. Updates become explicit system states — understandable, testable and recoverable. Nothing becomes visible before its owner has durably committed it.
01
ReproducibleBuild the same system from a locked configuration.
02
RecoverableReturn to a previous generation when an update fails.
03
InspectableKnow what changed before trusting a new state.
System states
Generation 147
Active
Current · Rust interface foundation
Generation 146
Security update · verified
Generation 145
Before graphics configuration
$
nix flake check03 · Live implementation progress
Measured execution.
Verified milestones.
The verified M1–M6 substrate now carries grounded perception, epistemic projection, crash-safe erasure, and governed context delivery — while the interface layer migrates to Rust and WebAssembly through additive, separately gated steps.
12 Mind services
Twelve isolated Mind services with explicit typed ownership
Implemented runtime
37 CTest suites
Thirty-seven CTest suites plus reproducible repository policy gates
Verified baseline
Rust workspace
One locked Cargo workspace: protocol and codec crates, runtime and storage paths, the read-only gateway, and Living Canvas
Migration in progress
04 · Design language
Cybou Horizon
A visual system shaped by depth, negative space and a single line of light.
SymbolCybou Aperture
An open arc around a focused center: a system with room to evolve.
Palette
Mineral dark · Aurora mint
Typography
Aa
Calm, precise, human.
System sans-serif typography keeps the site independent from remote services.
05 · Principles
Replaceable where it can be.
Owned where it must be.
Quiet by default
No animated mascot, no glowing assistant, no feed competing for attention.
Surfaces are replaceable
Interfaces, models and tools can be swapped without touching memory, identity or policy.
Private by construction
No telemetry, no account requirement and no runtime asset downloads.
Built in stages
Each layer must be verifiable before the next one is allowed to depend on it.
06 · Roadmap
Build the body.
Then grow the mind.
Complete
Reproducible foundation
Locked builds · Horizon visual system · ISOComplete
Mind substrate
M1–M6 · P6.8 · Lifecycle and recoveryIn progress
Web-first Rust surface
Protocol crates · Gateway · Living CanvasIn progress
Grounded cognition and governed action
Perception · Language · Agents · Security07 · Questions & architecture
Frequently asked
questions.
Cybou is an experimental agent-native operating environment. A persistent local runtime called Mind owns durable memory, identity, commitments, lifecycle, health, and evidence, while models, agents, tools, and user interfaces stay replaceable around it.
A model is not Mind. An agent is not Mind. A tool protocol is not an authorization boundary. Cybou makes memory, identity, health, lifecycle, and recovery explicit system services with named owners, so no model can become the owner of continuity or authority.
No. The current runtime and interface need no cloud account, API key, or hosted AI service, and Cybou implements no telemetry. Remote models may become available later, but only behind explicit context, sensitivity, egress, and cost policy.
One Rust/WebAssembly frontend called Living Canvas serves both an ordinary browser and a lightweight desktop web shell. It reads through a read-only Rust gateway bound to loopback that exposes typed session, snapshot, and event streams and has no mutation route. The earlier KDE/Qt shell is migration-era code, not the target.
Cybou ships no language model, no agent or worker runtime, no model or tool broker, no privileged action executor, and no autonomous security control plane. Desktop bootstrap authentication is also still open. These are planned boundaries and are never described as done.
Cybou code and Nix expressions are licensed under MIT. Original visual assets (wallpapers, desktop themes, SVGs) are licensed under CC BY-SA 4.0. Copyright (c) 2026 Stanislav Saveliev.
The project starts here
A real operating system,
built one trusted layer at a time.
The blueprint defines the reproducible foundation, the twelve-service Mind runtime, the Rust/WebAssembly interface path, the verified implementation gates, and the cognitive roadmap.