Universal AI Operating System

TheOne

Universal control plane for intent, context, permissions, workflow, proof, and memory.

Mode
assist
Workflow
idle
Run
standby
OneAI
mock
OneClaw
mock
Level
L22
0
Capabilities
OS registry
0
Workers
OneClaw catalog
0
Memory Hits
Saved memory ledger
0
Allowed
Latest policy scope
0
Approval
Latest policy scope
0
Denied
Latest policy scope

Intent Hub

State the outcome once. TheOne turns it into a governed workflow across intelligence, execution, proof, and memory.

Execution Sandbox

Live trace of OneAI planning and OneClaw execution after Run TheOne.

standby
01 Intent
Waiting for Run TheOne
ready
TheOne Kernel · general · confidence -
{
  "objective": null,
  "route": []
}
02 OneAI
Plan, classify, and prepare execution
standby
Planning Driver · OneAI endpoint · ready
[]
03 Permission
0 approval gate(s)
ready
Policy Model · No approval required yet
[]
04 OneClaw
External task runtime
standby
Execution Driver · OneClaw endpoint · ready
[]
05 Proof
0 proof record(s)
standby
TheOne Ledger · Receipts appear after OneAI or OneClaw execution
[]

Run Result

Standing by for an objective.

idle
Run ID
-
Completed
-
Executions
-
Approvals
0
Denied
0
Risk
-
Architecture
-
OK
-

Kernel Flow

Intent to governed execution.

idle
Intent
-
Capabilities
-
Connectors
-
Permissions
-
IntentContext BusPermissionOneAIRuntimeApprovalOneClawProofMemory

Run Log

Chronological trace across kernel, policy, providers, proof, and memory.

idle
No run log yet.
Run TheOne to capture the first operating trace.

Context Bus

One governed frame for intent, capabilities, connectors, memory, approvals, and executions.

Resources
0
Connectors
0
Memory
0
No context frame yet.
Run TheOne to build a governed context bus frame.

Permission Model

Allowed
0
Approval
0
Denied
0
No permission decisions yet.
TheOne will evaluate connector, memory, and action scopes.

Workflow Runtime

No execution yet.
Run TheOne to generate a governed workflow trace.

Provider Drivers

OneAI and OneClaw stay outside TheOne. TheOne only connects to them as drivers.

Waiting for system status.
Run TheOne to inspect provider mode and capabilities.

Local Desktop Bridge

OneClaw local execution endpoint for Mac screen, app state, keyboard, mouse, and proof artifacts.

MISSING
Mode
-
Platform
-
Actions
0
Checks
0/0
OneClaw Local Desktop Bridge
no bridge id · host unknown · offline
OFFLINE
Local bridge reports desktop execution status and routing readiness.
No bridge diagnostics captured yet.
Run a local OneClaw bridge and refresh this panel.
allowlist · not configured
blocklist · none

OneClaw Worker Catalog

All OneClaw manifest workers are visible inside TheOne before we connect them one by one.

0
Workers
0
Live
0
Guarded
0
Prepared
0

Production Execution

TheOne reads OneClaw's live manifest, then gates actions with templates, preflight, approvals, and proof.

ready
Production
0
Guarded
0
Prepared
0
Planned
0
Execution Templates
Waiting for a run.
Live Connectors
Waiting for a run.
Manifest fallback · 0 actions · 0 connectors
Action Launcher
Task Monitor
No live OneClaw task captured yet.
Launch an action or approve a live gate to track execution here.

Automation Policy

TheOne decides what can run automatically, what needs approval, and what stays blocked.

assist
No OneClaw task pending
Run TheOne to see the automation policy decision for the next execution task.
nonerisk
Mode
assist
Approval
-
Preflight
-
Pending
0
Read
Read-only connector calls can run automatically when credentials and preflight pass.
auto
git.repo.getgit.repo.searchgit.actions.runsx.searchRecentTweetsknowledge.query
Reply
X replies can auto-run only when channel=x, mode=reply_only, strictReply=true, and a numeric reply target exists.
assist / auto
social.post
Publish
External writes that create public or user-visible state require approval unless a narrower policy is added.
manual
social.postgit.issue.createcalendar.event.createemail.send
Critical
Money, shell, persistent data writes, and signing stay blocked without explicit high-risk policy.
blocked
payment.*shell.*database.writeweb3.write

Event Sources

Real triggers normalized into TheOne before workers execute anything.

L12
Sources
Worker Runtime
No external events yet.
Poll a source or send a webhook to populate the event inbox.

Automation Scheduler

Long-running jobs that can trigger TheOne without a manual button press.

L11

Policy Registry

Persistent automation rules for action, risk, mode, and execution decision.

Multi-Agent Runtime

Planner, Policy, Critic, Operator, and Memory run in parallel before execution closes.

L20
No multi-agent consensus yet
Run TheOne to generate a multi-agent quorum.
idleconsensus
Standing by for agent quorum.
The next run will record each agent role and consensus.

OS Package Registry

Installable apps, workers, connectors, runtimes, and policy packs with versions, permission scopes, and sandbox boundaries.

L21
Total
0
Installed
0
Enabled
0
Kinds
0
Sandboxed
0
Gated
0

Learning Engine

TheOne turns run history, event failures, approvals, and package state into improvement insights.

L16
Insights
0
Suggested
0
Applied
0
Dismissed
0
No learning insights yet.
Run Learning after a few runs/events to generate improvement suggestions.

Production Maturity

L19 multi-app automation, L20 agent runtime, L21 installable OS, L22 self-evolution, plus production hardening.

L22
Production Maturity Layer
Loading production maturity report.
-readiness

Runtime Ops

Queue, replay, resume, agent roles, permissions, and external API surface.

L17
Pending
0
Running
0
Failed
0
Runs
0
Agent Runtime
Planner AgentCritic AgentPolicy AgentMemory AgentRecovery AgentOperator Agent
Connector Permission Center
Action scope · connector scope · mode policy · approval gates · live credentials · event receipts
Replay / Resume
No run selected
TheOne API / SDK Surface
POST /api/theone/runPOST /api/theone/commandPOST /api/theone/planPOST /api/theone/executePOST /api/theone/policy/evaluateGET /api/theone/packagesPOST /api/theone/packagesPOST /api/theone/packages/installGET /api/theone/productionGET /api/theone/learningPOST /api/theone/learningPOST /api/theone/learning/applyGET /api/theone/automation/jobsPOST /api/theone/automation/jobsPOST /api/theone/automation/tickGET /api/theone/events/sourcesPOST /api/theone/events/pollPOST /api/theone/events/ingestPOST /api/theone/events/routeGET /api/theone/workersGET /api/theone/events/streamGET /api/theone/runsGET /api/theone/runs/:idPOST /api/theone/runs/:id/replayPOST /api/theone/runs/:id/resumeGET /api/theone/eventsGET /api/theone/policy/rulesPOST /api/theone/policy/rules

Approval Gates

Approve TheOne gates and live OneClaw execution gates from one control plane.

0 live
No approval gates yet.
Risk policy appears after TheOne builds a workflow.

Recent Runs

No durable runs yet.
Run TheOne once to write the first OS ledger entry.

Memory Context

No recalled memory yet.
TheOne will query prior runs as the ledger grows.

Capability Map

Apps are bundles. TheOne routes work through universal real-world capability primitives.

Capability graph waiting.
Run TheOne to see the active capability route.
Matched Skills
No route yet.
App Bundles
No route yet.
Connectors
No route yet.

Connector Registry

Connectors are external system surfaces. TheOne selects them; OneClaw or TheOne drivers operate them.

Connector catalog waiting.
Run TheOne to see the active connector route.

Proof Ledger

No proof yet.
Proof appears after agent execution.

Event Ledger

Event-sourced trace for runs, approvals, submissions, sync, proof, and memory.

No events recorded yet.
Run TheOne or sync an execution to populate the event ledger.

Durable Ledger

Proof
No proof receipts yet.
Memory
No memory notes yet.

Universal AI OS

Kernel waiting.
The OS layers appear after the first run.

Network Heat

Earn money
Grow followers
Launch missions
Build AI workflows