Agentic build skills
These skills support you building NumericalOS targets on your own machine, or via Cloudflare Sandbox + R2 when the host has no local Linux/WSL. This site does not ship prebuilt OS images as the primary product.
Point your agent at AGENTS.md for the protocol, or take the whole bundle: skills.zip.
| skill | when it fires |
|---|---|
| numericalos-algoblocker-enterprise | > Export and operate the NumericalOS privacy-workstation profile that is Algoblocker enterprise layer 3 (3+2+1). Use when the user asks to complete Algoblocker workstation support, stamp or validate algoblocker-privacy-posture receipts, merge privacy units into a seed, or wire NumericalOS to algoblocker.com/enterprise. Not an ISO build and not a boot claim. |
| numericalos-build-initramfs | Build a NumericalOS initramfs (cpio.gz) whose /init is the graph-driven bootstrap. Use when numericalos-target-classifier routed here, or when the user asks for a NumericalOS initramfs, initrd, or the userspace half of bootable media. Assembles graph-resolved numos-floor (tool multi-call binary), the boot chain, and a verified numos.state — prefer profile self-init for offline complete boots. |
| numericalos-build-iso | Build NumericalOS bootable media - a hybrid ISO that boots from optical or USB, pairing a kernel with the graph-driven initramfs. Use when numericalos-target-classifier routed here, or when the user asks for a NumericalOS ISO, USB stick, bootable image, or bare-metal media. Builds the initramfs first, then wraps kernel plus initramfs in a BIOS/UEFI-bootable image. |
| numericalos-build-iso-cf | > Produce NumericalOS Linux ISO/initramfs artifacts via Cloudflare (Containers Sandbox + R2), not WSL and not a local Linux host. Use when the user asks to build NumericalOS ISO on Cloudflare, avoid WSL, generate boot media without installing Linux locally, or when numericalos-target-classifier routes here because the machine has no local cpio/xorriso/WSL but has Cloudflare access. Triggers: "Cloudflare ISO", "build ISO without WSL", "CF Sandbox initramfs", "R2 ISO artifacts", "/numericalos-build-iso-cf". Honesty: Workers alone cannot mkisofs; a Linux container under CF does the pack. Artifact built ≠ boot verified. |
| numericalos-build-oci | Build a NumericalOS OCI container image runnable by Docker, Podman, containerd, or nerdctl. Use when numericalos-target-classifier routed here, or when the user asks for a NumericalOS container/Docker/Podman image. Covers the OCI, rootless-Podman, and LXC/system-container differences honestly rather than flattening them, and states plainly what a container can and cannot prove about a boot. |
| numericalos-publish-site | > Build and publish the full NumericalOS self-hosted site to numericalos.com (Cloudflare Pages project numericalos, production branch main). Use after any content, docs, skills, or status change that should go live; when the user says "update the site", "deploy numericalos.com", "publish pages", "redeploy site", "sync the website", or after finishing a NumericalOS docs/status cycle without a git remote. Triggers: "/numericalos-publish-site", "publish site", "update numericalos.com", "deploy Pages", "site is stale". This is the site publish path — not ISO build and not boot verification. |
| numericalos-target-classifier | Use FIRST, before any NumericalOS build skill, to decide which target the user's machine can actually produce - OCI container image, initramfs, hybrid ISO/USB, Cloudflare remote ISO (no WSL), or nothing buildable here. Triggers - "build NumericalOS", "make a NumericalOS image", "boot NumericalOS", "which NumericalOS target", "NumericalOS on my machine", "ISO without WSL", "Cloudflare ISO", or any request to produce NumericalOS bootable media or a container image. Probes the real toolchain rather than assuming, and routes to exactly one build skill. |
| numericalos-verify-boot | Boot a NumericalOS artifact under QEMU and report what actually happened. Use after any NumericalOS build skill, or when the user asks to verify, test, smoke-test, or prove a NumericalOS image boots. This is the ONLY skill in the family permitted to make a boot claim, and only about the exact artifact and architecture it observed. Closes the verification gate the NumericalOS repository itself cannot close. |
The honesty contract
Only numericalos-verify-boot may claim a boot, and only for the
artifact and architecture it observed. Build skills produce artifacts and say
exactly that. A prior QEMU observation on x86_64 does not generalize to other
arches, metal, or a new ISO you just built — re-run verify-boot.