oxios
Agent Operating System
Large language models are powerful, but they're stuck in chat boxes. Oxios gives them an operating system — lifecycle management, tool execution, state persistence, security boundaries, and an orchestration protocol — so agents can autonomously complete real tasks. ~67,000 lines of Rust. 196+ source files. Zero containers. Zero subprocess browsers. Everything runs in-process.
$ cargo install oxios
View on GitHub
Features
Supervisor
Unix-style agent lifecycle: fork, exec, wait, kill. The Supervisor is the 'init' of Oxios.
Tiered memory
3-tier memory (Hot/Warm/Cold) with HNSW vector search, automatic consolidation, and Ebbinghaus-inspired decay.
RBAC + audit trail
Access Manager with path sandboxing and Merkle-chain audit trail (BLAKE3). Defense in depth.
In-process browser
OxiBrowser embedded directly — browse, fill forms, extract data without leaving the process.
MCP & A2A
Model Context Protocol and Google's Agent-to-Agent protocol for horizontal agent communication.
Circuit breaker
3-state protection against cascading LLM provider failures. Rate-limit-aware admission control.
Install
cargo install oxios Screenshots
Screenshots coming soon
