A Linux-based runtime for running AI agents in isolated, policy-controlled sessions.
Each agent session runs in its own set of Linux namespaces (PID, mount, network, UTS) with cgroup resource limits. File access goes through an OverlayFS layer so the agent's changes never touch the original files. Network access is restricted to explicitly allowed endpoints via network namespace routing. File modifications are automatically versioned and reversible.
HavenOS is a purpose-built Linux distribution. havend runs as PID 1 and manages the full session lifecycle. No systemd, no SSH, no shell, no package manager. The root filesystem is immutable. Isolation is enforced at the kernel level through namespaces, cgroups, and routing.
Early development. Working through the core runtime: namespace isolation, OverlayFS workspaces, network namespaces, checkpoint/restore.
Requires Linux and root privileges for namespace and cgroup operations.
go build -o haven ./cmd/haven
sudo ./haven session create /bin/bash
cmd/haven/ CLI entry point
internal/session/ Session data and path management
internal/runtime/ Namespace init, overlay, cgroups
TBD