Open-source Agent OS: Rust-based OS for AI agents with WASM sandboxing and Hands feature

OpenClawRadar has open-sourced an operating system designed specifically for AI agents. The system is written in Rust (137k lines of code) and is MIT licensed.

Core Architecture

The system treats AI agents similarly to how Linux handles processes. Agents run inside WASM sandboxes, and the kernel schedules them, isolates them, meters their resources, and terminates them if they behave maliciously.

Security Features

The OS includes 16 security layers baked into the core:

• WASM sandboxing
• Merkle hash-chain audit trails
• Taint tracking on secrets
• Signed agent manifests
• Prompt injection detection
• SSRF protection

Each security layer operates independently. The developers state that giving LLMs tools without isolation is 'insane' and they've designed this system to avoid that approach.

Hands Feature

The system introduces 'Hands' - a different approach to agent operation. Unlike typical chatbot-style agents that wait for user input, Hands run autonomously on schedules, operating 24/7 without requiring prompts.

Example Hands include:

• Lead Hand: Finds and scores prospects every morning, delivering them to Telegram before you wake up
• Researcher Hand: Writes cited reports while you sleep
• Collector Hand: Monitors targets and builds knowledge graphs continuously