AOS Community Edition gates every release on a machine-readable upgrade self-heal check.

unicity-aos/aos-ce hit 7,772 stars in 17 days for an open agent OS in Rust. The supply-chain posture is the story: every release publishes checksums, Sigstore bundles, GitHub build-provenance attestations, and a runtime-compatibility.toml pinning the exact runtime release and WIT commit, and a tag cannot publish unless both the compatibility gate and an upgrade self-heal gate pass, the latter requiring the candidate to preserve a frozen standalone-home clone and boot with fresh coordination state. Only 14 forks against 7,772 stars, so consumption rather than contribution so far.