Built to stop safely
Autonomy with edges.
AIOS spends its complexity on the places where unattended coding
usually fails: isolation, cancellation, stale evidence, secrets,
and loops that should have stopped.
Independent review
The builder cannot approve itself.
Configuration and runtime selection both reject identical coder
and reviewer engines. The separation is a program invariant, not
a prompt suggestion.
coder_default != reviewer_default
enforced
Isolation
Your checkout stays untouched.
Task work and merge integration happen in dedicated worktrees.
Bounded recovery
Stuck work has a ladder—and an end.
Retry, revise, decompose, respec, then structured human handoff.
Scoped tools
MCP access starts at deny.
Tasks opt into named servers; retained configuration is redacted.
Cost visibility
Token usage stays attributable.
Inspect per-run estimates and recurring review patterns locally.