GurtOS
DocsAn operating system for AI agents that work for you, safely
Each task runs as its own Linux user in a copy of your files. Agents never hold your keys, and anything that spends money waits for your OK on the box’s screen or your phone.
Download the preview
Read the docs
v0.1.0-preview, built at Cal Hacks 13.0. Not security audited yet: install it on a spare machine or a VM.
14:07
Tuesday, October 20
14:07
What it does
Four things GurtOS does that an agent on your laptop can’t.
1. Undo one task
Each task works in its own copy of the files. Undo it and only its changes go back; every other task keeps going.
GurtOS
demo box
Fri Oct 23 19:04
3
need you
2 running
Shopper
Find me a road bike
Task tr0c6j2f8p4 · runs as box-tr0c6j2f8p4
Undo task
Done
Started 19:02:04 · took 10 s · $0.03 of a $0.50 budget
This task tried 4 things it is not allowed to do. All 4 were blocked and logged.
It read a listing that hid instructions to send the box’s keys to attacker.example. It never had a key to send: the vault is root only and makes calls for the agent.
Steps, from the action log
1371
19:02:04
Task created from the portal
1372
19:02:09
Read the listing page on shop.localhost:8081
1373
19:02:10
Blocked: reading the vault at /etc/box/vault.env (root only)
1374
19:02:10
Saved its own environment: no keys in it
1375
19:02:11
Blocked: sending to attacker.example, not one of this task’s hosts
1376
19:02:11
Blocked: connecting straight to 1.1.1.1:443, around the proxy
1377
19:02:12
Blocked: the box’s own API and SpacetimeDB
1378
19:02:14
Done. 6 files changed in its own copy.
Files it changed
page.html
Added
vault.txt
Added
env.txt
Added
exfil.txt
Added
direct.txt
Added
spacetime.txt
Added
In its own copy only. Undo removes this task’s layer; every other task keeps its changes.
What it was allowed
Hosts
shop.localhost:8081
Tools
none
Budget
$0.50
Worker
Droid with Claude
Undo Find me a road bike?
Its 6 files leave the workspace and the task is marked undone. Every other task keeps its changes. The log keeps every step.
Cancel
Undo task
2. The booby-trapped page
A page hides instructions to steal keys. It fails: the agent never holds a key, the vault makes the call for it, and the task can only reach its own hosts. The attempt is logged and the task undone.
GurtOS
demo box
Fri Oct 23 19:04
3
need you
2 running
Shopper
Find me a road bike
Task tr0c6j2f8p4 · runs as box-tr0c6j2f8p4
Undo task
Done
Started 19:02:04 · took 10 s · $0.03 of a $0.50 budget
This task tried 4 things it is not allowed to do. All 4 were blocked and logged.
It read a listing that hid instructions to send the box’s keys to attacker.example. It never had a key to send: the vault is root only and makes calls for the agent.
Steps, from the action log
1371
19:02:04
Task created from the portal
1372
19:02:09
Read the listing page on shop.localhost:8081
1373
19:02:10
Blocked: reading the vault at /etc/box/vault.env (root only)
1374
19:02:10
Saved its own environment: no keys in it
1375
19:02:11
Blocked: sending to attacker.example, not one of this task’s hosts
1376
19:02:11
Blocked: connecting straight to 1.1.1.1:443, around the proxy
1377
19:02:12
Blocked: the box’s own API and SpacetimeDB
1378
19:02:14
Done. 6 files changed in its own copy.
Files it changed
page.html
Added
vault.txt
Added
env.txt
Added
exfil.txt
Added
direct.txt
Added
spacetime.txt
Added
In its own copy only. Undo removes this task’s layer; every other task keeps its changes.
What it was allowed
Hosts
shop.localhost:8081
Tools
none
Budget
$0.50
Worker
Droid with Claude
3. A pause for your OK
A task that wants to spend over its budget stops and asks. The request reaches the box’s screen and your phone while other tasks keep running.
14:07
Waiting for me
FS
Fogline Supply · signed in as Rosa Delgado
Credit line for Bright Harbor Catering
$40,000
Net 30 · APP-1042
Requested by Sam Chen · prepared by Credit analyst agent
Requests over $10,000 go to the Controller for approval. Rosa Delgado can approve it.
The agent’s checks
Guarantor credit 790, band A
TransUnion through CRS · BND-A
Identity checks passed
CRS identity verification
Fraud Finder: no reasons
CRS Fraud Finder
Verified revenue $2,150,000
The lowest of stated, business credit and bank deposits · LIM-2
Limit $40,000 on Net 30
The smallest of the request, band A’s cap and 10% of revenue · LIM-1
Sandbox data from CRS and Capital One Nessie test accounts.
Deny
Approve $40,000
4. Pull the plug
Cut the power. When the box boots, every task picks up where it was, and nothing is paid twice.
GurtOS
demo box
Fri Oct 23 19:04
3
need you
2 running
Welcome back, Ben
The box lost power at 18:51 and started again at 18:52. Every task is where it was.
NEEDS YOU
3
Buy a GPU hour: $8.00
APP-1042: a $40,000 limit
Hario filters: $13.00 (test)
RESUMED
2
Fix the failing test: from step 4
Describe 1,200 photos: from batch 2
PAID TWICE
0
A call that had paid kept its key,
so the resume did not pay again
GurtOS
18:52
Restored after a power cut
9 tasks rebuilt from the action log. 2 picked up where they stopped. 3 still wait for your OK.
Three editions, one system
The same core and design on a box in your closet, on your laptop and on a company’s shared box.
HB
Home box
GurtOS Server
An always-on box at home or in the cloud. Agents work all day; you watch from the phone.
The owner approves
2 waiting
BL
Ben’s laptop
GurtOS Personal
Your own laptop on GNOME. Agents work beside you on copies of your folders.
You approve, at the laptop or on the phone
1 waiting
Download the ISO; runs Ubuntu 24.04 with GNOME
FS
Fogline Supply
GurtOS Business
One box for a company. People have roles, and rules route each request.
Requests over $10,000 go to the Controller
3 waiting
In development: people, rules and an audit log
One phone app for every machine
Install it from app.gurtos.com to your Home Screen, pair it with each box, and every notification names its machine.
19:04
Home box
GurtOS Server · Online · 2 running · $0.34 today
Needs you
Buy a GPU hour
Spend $8.00, over its $5.00 budget
$8.00
Hario V60 filters, 2 packs
$13.00, test payment
$13.00
Running
Fix the failing test
Step 4 of 7, npm test
Describe 1,200 photos
Batch 2 of 4
Kill switch
Pause all agents
Running tasks stop mid-step and new ones wait. What waits for your OK stays open.
Home
Tasks
Activity
Settings
Machines
Add a machine
Scan the QR code on its screen
Each machine has its own pairing. On a GurtOS Business machine you are a person with a role; on the others, this phone answers for the owner. Approvals from every machine reach this phone, each named by its machine.
NOW SHOWING
HB
Home box
GurtOS Server
An always-on box at home or in the cloud. Agents work all day; you watch from the phone.
The owner approves
2 waiting
GurtOS v0.1.0-preview · Apache-2.0 · Built at Cal Hacks 13.0
An operating system for AI agents that work for you, safely
Each task runs as its own Linux user in a copy of your files. Agents never hold your keys, their network reaches only what the task needs, and anything that spends money waits for your OK on the box’s screen or your phone.
v0.1.0-preview, built at Cal Hacks 13.0. Not security audited yet: install it on a spare machine or a VM.
GurtOS
demo box
Fri Oct 23 19:04
3
need you
2 running
Good evening, Ben
3 tasks need your OK. 2 are running. 4 attempts were blocked today.
NEEDS YOU
3
Buy a GPU hour: $8.00
APP-1042: a $40,000 limit
Hario filters: $13.00 (test)
RUNNING
2
Fix the failing test: step 4 of 7
Describe 1,200 photos: batch 2 of 4
SPENT TODAY
$0.34
of a $5.00 daily limit
9 tasks, 4 blocked attempts
Wallet
now
Buy a GPU hour needs your OK
Spend $8.00 on example.spend? That is $3.00 over its $5.00 budget. Other tasks keep running.
Deny
Approve $8.00
14:07
Tuesday, October 20
14:07
GurtOS
now
Fogline Supply
Approve a $40,000 credit line? Bright Harbor Catering, asked by Sam Chen.
What it does
Four things GurtOS does that an agent on your laptop can’t. Each one runs in the demo, on a real box.
1
Undo one task
Each task works in its own copy of the files. Undo it and only its changes go back; every other task keeps going.
GurtOS
demo box
Fri Oct 23 19:04
3
need you
2 running
Shopper
Find me a road bike
Task tr0c6j2f8p4 · runs as box-tr0c6j2f8p4
Undo task
Done
Started 19:02:04 · took 10 s · $0.03 of a $0.50 budget
This task tried 4 things it is not allowed to do. All 4 were blocked and logged.
It read a listing that hid instructions to send the box’s keys to attacker.example. It never had a key to send: the vault is root only and makes calls for the agent.
Steps, from the action log
1371
19:02:04
Task created from the portal
1372
19:02:09
Read the listing page on shop.localhost:8081
1373
19:02:10
Blocked: reading the vault at /etc/box/vault.env (root only)
1374
19:02:10
Saved its own environment: no keys in it
1375
19:02:11
Blocked: sending to attacker.example, not one of this task’s hosts
1376
19:02:11
Blocked: connecting straight to 1.1.1.1:443, around the proxy
1377
19:02:12
Blocked: the box’s own API and SpacetimeDB
1378
19:02:14
Done. 6 files changed in its own copy.
Files it changed
page.html
Added
vault.txt
Added
env.txt
Added
exfil.txt
Added
direct.txt
Added
spacetime.txt
Added
In its own copy only. Undo removes this task’s layer; every other task keeps its changes.
What it was allowed
Hosts
shop.localhost:8081
Tools
none
Budget
$0.50
Worker
Droid with Claude
Undo Find me a road bike?
Its 6 files leave the workspace and the task is marked undone. Every other task keeps its changes. The log keeps every step.
Cancel
Undo task
2
The booby-trapped page
A page hides instructions to steal keys. It fails: the agent never holds a key, the vault makes the call for it, and the task can only reach its own hosts. The attempt is logged and the task undone.
GurtOS
demo box
Fri Oct 23 19:04
3
need you
2 running
Shopper
Find me a road bike
Task tr0c6j2f8p4 · runs as box-tr0c6j2f8p4
Undo task
Done
Started 19:02:04 · took 10 s · $0.03 of a $0.50 budget
This task tried 4 things it is not allowed to do. All 4 were blocked and logged.
It read a listing that hid instructions to send the box’s keys to attacker.example. It never had a key to send: the vault is root only and makes calls for the agent.
Steps, from the action log
1371
19:02:04
Task created from the portal
1372
19:02:09
Read the listing page on shop.localhost:8081
1373
19:02:10
Blocked: reading the vault at /etc/box/vault.env (root only)
1374
19:02:10
Saved its own environment: no keys in it
1375
19:02:11
Blocked: sending to attacker.example, not one of this task’s hosts
1376
19:02:11
Blocked: connecting straight to 1.1.1.1:443, around the proxy
1377
19:02:12
Blocked: the box’s own API and SpacetimeDB
1378
19:02:14
Done. 6 files changed in its own copy.
Files it changed
page.html
Added
vault.txt
Added
env.txt
Added
exfil.txt
Added
direct.txt
Added
spacetime.txt
Added
In its own copy only. Undo removes this task’s layer; every other task keeps its changes.
What it was allowed
Hosts
shop.localhost:8081
Tools
none
Budget
$0.50
Worker
Droid with Claude
3
A pause for your OK
A task that wants to spend over its budget stops and asks. The request reaches the box’s screen and your phone while other tasks keep running.
14:07
Waiting for me
FS
Fogline Supply · signed in as Rosa Delgado
Credit line for Bright Harbor Catering
$40,000
Net 30 · APP-1042
Requested by Sam Chen · prepared by Credit analyst agent
Requests over $10,000 go to the Controller for approval. Rosa Delgado can approve it.
The agent’s checks
Guarantor credit 790, band A
TransUnion through CRS · BND-A
Identity checks passed
CRS identity verification
Fraud Finder: no reasons
CRS Fraud Finder
Verified revenue $2,150,000
The lowest of stated, business credit and bank deposits · LIM-2
Limit $40,000 on Net 30
The smallest of the request, band A’s cap and 10% of revenue · LIM-1
Sandbox data from CRS and Capital One Nessie test accounts.
Deny
Approve $40,000
4
Pull the plug
Cut the power. When the box boots, every task picks up where it was, and nothing is paid twice.
GurtOS
demo box
Fri Oct 23 19:04
3
need you
2 running
Welcome back, Ben
The box lost power at 18:51 and started again at 18:52. Every task is where it was.
NEEDS YOU
3
Buy a GPU hour: $8.00
APP-1042: a $40,000 limit
Hario filters: $13.00 (test)
RESUMED
2
Fix the failing test: from step 4
Describe 1,200 photos: from batch 2
PAID TWICE
0
A call that had paid kept its key,
so the resume did not pay again
GurtOS
18:52
Restored after a power cut
9 tasks rebuilt from the action log. 2 picked up where they stopped. 3 still wait for your OK.
Three editions, one system
The same core and the same design run on a box in your closet, on your own laptop and on a company’s shared box.
HB
Home box
GurtOS Server
An always-on box at home or in the cloud. Agents work all day; you watch from the phone.
The owner approves
2 waiting
BL
Ben’s laptop
GurtOS Personal
Your own laptop on GNOME. Agents work beside you on copies of your folders.
You approve, at the laptop or on the phone
1 waiting
Download the ISO; runs Ubuntu 24.04 with GNOME
FS
Fogline Supply
GurtOS Business
One box for a company. People have roles, and rules route each request.
Requests over $10,000 go to the Controller
3 waiting
In development: people, rules and an audit log
One phone app for every machine
Install it from app.gurtos.com to your Home Screen. Pair it with each box the way you add an account, and every notification names the machine it came from.
19:04
Home box
GurtOS Server · Online · 2 running · $0.34 today
Needs you
Buy a GPU hour
Spend $8.00, over its $5.00 budget
$8.00
Hario V60 filters, 2 packs
$13.00, test payment
$13.00
Running
Fix the failing test
Step 4 of 7, npm test
Describe 1,200 photos
Batch 2 of 4
Kill switch
Pause all agents
Running tasks stop mid-step and new ones wait. What waits for your OK stays open.
Home
Tasks
Activity
Settings
Machines
Add a machine
Scan the QR code on its screen
Each machine has its own pairing. On a GurtOS Business machine you are a person with a role; on the others, this phone answers for the owner. Approvals from every machine reach this phone, each named by its machine.
NOW SHOWING
HB
Home box
GurtOS Server
An always-on box at home or in the cloud. Agents work all day; you watch from the phone.
The owner approves
2 waiting
14:07
Tuesday, October 20
14:07
GurtOS
now
Fogline Supply
Approve a $40,000 credit line? Bright Harbor Catering, asked by Sam Chen.
14:07
Waiting for me
FS
Fogline Supply · signed in as Rosa Delgado
Credit line for Bright Harbor Catering
$40,000
Net 30 · APP-1042
Requested by Sam Chen · prepared by Credit analyst agent
Requests over $10,000 go to the Controller for approval. Rosa Delgado can approve it.
The agent’s checks
Guarantor credit 790, band A
TransUnion through CRS · BND-A
Identity checks passed
CRS identity verification
Fraud Finder: no reasons
CRS Fraud Finder
Verified revenue $2,150,000
The lowest of stated, business credit and bank deposits · LIM-2
Limit $40,000 on Net 30
The smallest of the request, band A’s cap and 10% of revenue · LIM-1
Sandbox data from CRS and Capital One Nessie test accounts.
Deny
Approve $40,000
GurtOS v0.1.0-preview · Apache-2.0 · Built at Cal Hacks 13.0