Skip to content

KOS SDK

Build systems you can trust

Resilient foundations for your critical systems, built with KOS-specific tools

Request access to the KOS SDK

Key Components

KOS STUDIO

Helping you build systems you can trust

Building and shipping a secure system shouldn't take a kernel team. Yet that is what it takes today when the system must run mission critical infrastructure, manage data across trust boundaries, or contain cyber capable agents.

A conventional OS comes with a large attack surface, where a single flaw can bring down the entire system, so system teams have had to build their own foundation from the kernel up.

KOS Studio gives you a ready-made foundation with a formally verified microkernel underneath, and the tools to build, test, and ship on top.

KOS Studio

KOS Studio features

End-to-end toolchain
The KOS tools cover the whole lifecycle: install any KOS version and platform, scaffold a system, add packages, build, run under QEMU or on hardware, and deploy to your devices.
Pick your programming model
Write high assurance applications against a POSIX-like API or lift-and-shift your existing Linux solution into KOS microVMs. Better yet, use both on one system, and give each component only the capabilities it needs.
Speed up with KOS Context
KOS Context gives your coding agent in-depth knowledge of how quality KOS systems are built, from the system architect to the services and the patterns they follow. Let your agent handle the scaffolding and the conventions, so you can focus on the properties your system must have.
Visualise your system
Quickly and easily view all the apps running on your system, how and whether you've permitted them to communicate, and recovery behavior if you introduce a fault. Be confident that your system is exactly what you intended.

KOS Context

Your coding agent, trained on KOS

A coding agent is only as good as what it knows. On its own, the agent carries Linux habits into a capability system and burns your tokens trying conventional practices until something works.

KOS Context gives your agent the fast path, including how to compose a KOS system correctly, use the appropriate APIs, apply the patterns quality KOS systems follow, and avoid any problems.

Describe the system you need and the agent can guide your way on KOS.

KOS Context

Easy building with KOS Context

  1. Comes with the package

    Install KOS Context with KOS tooling and it runs straight out of the box.

  2. Plan, learn, and debug

    The kos-context knowledge base comes into play on any KOS-related question. Ask it to lay out the apps and their communication for a new system, to explain a KOS concept, or to track down why a service misbehaves at runtime. The knowledge base covers architecture, the platform concepts, and troubleshooting across C, Elixir, and Rust.

  3. Upstream the fixes

    If the agent discovers a gap in the context, just run /kos-report to create a structured report of the issue, with the evidence and a proposed fix, for us. We’ll review it and fold the fix into the next release, so you don’t have to maintain your own workaround.

Fleet MANAGER

Critical infrastructure demands high assurance updates

A high-assurance system is built for critical devices in the field, where high availability is expected and failure is expensive. But those devices never stand still: they still need new features, updates, and config, all delivered remotely. That remote channel and the update mechanism becomes part of the critical infrastructure it serves as well as its trust chain.

Fleet Manager is built for KOS systems making it easy to see your fleet's security posture and status in a glance, even as you ship constantly.

FLEET MANAGER

Operate your fleet with confidence

Releases, down to a single component
Roll a versioned release out to a device, a group, or the whole fleet from one dashboard or your continuous deployment pipeline. Or go finer and add, replace, remove, stop, or start an individual component on a device.
Per-device overlays
Give a device or group its own configuration through overlays, without forking the system or keeping a separate build.
Secure connectivity
Devices connect outward over an encrypted tunnel, so you can reach and manage any of them without exposing them to an open network.
Teams and hosting
You can start using Fleet Manager with our cloud-hosted instances or deploy your own instance for complete control.

GUARD DEVICES

Get Started

Request access to the KOS SDK

Contact us