Graph-driven Linux userspace

Init is a graph.
Not a pile of unit files.

NumericalOS boots from one content-hashed artifact — numos.state — exported from a knowledge graph. Phases, units, health, and join state travel together. Fail closed. Stay honest about what has and has not been observed.

Clone the source Read the docs Whitepaper

Config one hashed state file
Floor graph-resolved numos-floor
Build local Linux or Cloudflare
Claim only after QEMU verify

Serial · QEMU x86_64 · self-init

numos: arch x86_64
numos: init numinit.sh (shell floor)
numos: state verified
numos: boot complete degraded=0
numos: steady state entered

Self-init profile complete. Fleet on bare QEMU still degrades. Not metal, not every arch. Evidence inventory →

Status: bootstrap logic tested; x86_64 QEMU self-init PASS (degraded=0) on kernel+initrd and hybrid ISO/GRUB serial; fleet bare-QEMU PASS-degraded; metal and non-x86_64 unverified. Unit tests cover the shell/Python floor. Graph-resolved Graph-driven self-init distro completes offline; fleet units (net/clock/join) expect richer environment than bare QEMU.

Clone & test

git clone https://numericalos.com/numericalos.git
cd numericalos
python3 -m unittest discover -s tests

Dumb-HTTP git. No forge account. Commit 1eb4fb9.

Host install (not PID 1)

curl -fsSL https://numericalos.com/boot | sh

Installs the floor under a prefix. Never silently replaces init. Boot chain →

Build without WSL

numericalos-build-iso-cf produces initramfs/ISO via Cloudflare Sandbox + R2. Workers alone cannot mkisofs — a Linux container does the pack.

Claim a boot

Only numericalos-verify-boot may assert a boot, and only for the artifact and arch it observed. All skills →

Docs Whitepaper Principles AGENTS.md skills.zip Source browser

What it is

Conventional init systems reconstruct a dependency graph from unit files at boot. NumericalOS inverts that: a knowledge graph is the system of record; numos.state is a deterministic, content-addressed projection. Change machine behavior by changing the graph and re-exporting — not by editing files on the node.

META      policy      admission, capability grants, trust roots
GENESIS   bring-up    BootPhase ordinals (mount … join)
MGS       steady      OSUnit set (infra seed + ops-derived)
SHADOW    failure     HealthPredicate + residuals
ASEC      self-heal   swarm invocation on fire (protocol separate)

Architecture table at boot is generated from ArchTarget nodes. Adding an arch is data + regenerate; a test asserts the committed table matches the generator.

Boot path (self-contained image)

[kernel] → initramfs /init
  0. NUMOS_OFFLINE=1, NUMOS_PREFIX=/opt/numericalos
  1. uname -m → canonical arch (generated table)
  2. resolve init from offline manifest
  3. acquire + sha256 verify (fail-closed)
  4. verify numos.state content hash
  5. exec numinit
numinit: phase walk → steady state (supervise / health / longruns)

Shell floor for reach; optional static numinit when published. Manifest is authority for “what exists,” not the arch triple alone. Nine registered arches; unpublished statics use the shell floor.

vector	entry	PID 1
initramfs / metal	`/init` → offline bootstrap → `numinit`	`numinit`
existing Linux host	`curl …/boot \| sh`	unchanged (no silent takeover)

Fail-closed by construction

condition	result
hash mismatch	halt with expected/actual digests
unknown arch	halt naming raw `uname -m`
cycle / dangling unit	reject at export; shell path also fails closed
`on_failure=halt`	stop phase walk
`on_failure=degrade`	continue; degraded flag persisted
join without coordinator	`disabled` (no outbound)
join rejected / unreachable	`failed` (never recorded as joined)
unenforceable `cpu_pct`	named halt (needs cgroups)

Understating a limitation is treated as the same class of defect as overstating a capability. See principles.

Agent build skills

This site publishes source, skills, and hashed shell artifacts — not OS disk images as the primary product. Your agent builds on your machine or via Cloudflare when there is no local Linux/WSL:

target-classifier

Probe host tools; route to exactly one build skill.

build-oci

Container image; phase walk under shared kernel (not a boot).

build-initramfs

cpio userspace; local Linux tools.

build-iso

Hybrid media: kernel + initramfs (local Linux).

build-iso-cf

Same artifacts via Cloudflare Containers + R2 (no WSL).

verify-boot

QEMU observation; only skill that may claim a boot.

Skills index · multi-agent protocol · skills.zip

What is and is not claimed

claimed	not claimed
Shell/Python floor covered by unittest	Metal boot
x86_64 self-init QEMU kernel+initrd: PASS (`degraded=0`)	Other arches under QEMU
x86_64 self-init hybrid ISO/GRUB serial: PASS (`degraded=0`)	Metal / USB on hardware
x86_64 fleet bare-QEMU: PASS-degraded	Fleet on ISO path; metal
Join outcomes falsifiable (`disabled`/`joined`/`failed`)	Full coordinator / op interpreter
No kernel shipped (BYO / pinned third-party at build)	Distro or package manager

Evidence inventory lists residuals and open gates in full.

Init is a graph.Not a pile of unit files.