AOS Community Edition Pins Exactly 21 Capsules and Gates Every Release on a Machine-Readable Upgrade Self-Heal Check

GitHub·medium signalXBlueskyLinkedInCopy link

unicity-aos/aos-ce (created 2026-07-12, 7,772 stars, Rust) reached 7.7K stars in 17 days for an open agent operating system with an aos CLI, HTTP API, distributions and Unicity Audit. The supply-chain posture is the notable part: every release publishes checksums, Sigstore bundles, GitHub build-provenance attestations and a runtime-compatibility.toml pinning the exact runtime release and WIT commit, and a tag cannot publish unless both the runtime-compatibility gate and an upgrade self-heal gate pass, the latter approved only after the candidate preserves a frozen standalone-home clone and boots with freshly generated coordination state. Only 14 forks against 7,772 stars suggests consumption rather than contribution so far.