Skip to content

AIUEOS · LISP MACHINE OPERATING SYSTEM

AIUEOS, a Lisp machine operating system

A Lisp machine puts one language under the whole system. AIUEOS builds on that idea with Kotoba: an S-expression language whose canonical form is IPLD data, so every definition has a CID. Clojure and EDN are compatible surfaces (cljk, edn), not the foundation. The desktop is a Kotoba program, kernel judgment is moving into Kotoba objects, and every capability is checked and granted per operation.

Release os-20261027 is a diagnostic QEMU/OVMF release. It is not for physical machines and is not a production-signed release.

Go to downloads 日本語 Release on GitHub

Download

AIUEOS

AIUEOS

The common OS foundation.

ISO · 16 MiB Disk image · 64 MiB

Build receipt · Signature

ISO SHA-256 1bb7682839cd52eba32d0e845e02af0f46f076ba96b1047f553f3651bec1e2df

Receipt SHA-256 7262257a5b004d15c755c552fa4f3cd158e312e549ca4eb5a06ef84ce885fb30

ITONAMI OS · AWAI DISTRIBUTION

Itonami OS

The Awai Network distribution of AIUEOS.

ISO · 16 MiB Disk image · 64 MiB

Build receipt · Signature

ISO SHA-256 1bb7682839cd52eba32d0e845e02af0f46f076ba96b1047f553f3651bec1e2df

Receipt SHA-256 b3bf05de5a000d8d9f3a3e7992eac2bf6e4c0d5755e62ec0704575d73f5ba09e

Today the two distributions ship identical image bytes (the same SHA-256); the distribution is named in the signed build receipt. x86_64, UEFI.

Verify before you run

Check the digests, then verify the build receipt's signature against the published public key.

shasum -a 256 -c SHA256SUMS
python3 verify-release-signature.py \
  --receipt aiueos-x86_64-build-receipt.json \
  --signature aiueos-x86_64-build-receipt.sig \
  --public-key release-signing-key.pub

SHA256SUMS · release-catalog.json · Verifier script · Public key

The signing key is a qualification key; the production key stays offline.

Why a Lisp machine

ONE LANGUAGE

Kotoba is the system language

A small canonical S-expression core writes the apps, the desktop and kernel judgment. Clojure-compatible surfaces (cljk, edn) read into it.

AUTHORITY PER OPERATION

Nothing is granted by default

An external operation happens only after a fresh approval of what is displayed. Denial sends nothing.

CONTENT-ADDRESSED

Definitions have CIDs

The canonical form is IPLD data, so code, dependencies and policy are identified by content hash and artifacts are matched by digest.

AMU · SELFHOST

The compiler is in the same layer

Amu, Kotoba's compiler, self-hosts natively. The whole AIUEOS build is not yet done by Kotoba and Amu alone: the host-side build and audit scripts are still Python.

Itonami OS is the distribution that takes this OS toward web3-first: user-held keys and per-operation consent, shaped like a browser. That is a roadmap; this release contains no wallet or DID.

What this release is, and is not

  • Boot and install evidence is QEMU/OVMF only. Real-machine boot, hardware support and continuous operation are not qualified.
  • The image is the hybrid build: a C kernel marshals and Kotoba objects judge. The C-free native desktop is a separate diagnostic candidate, not this image.
  • The signature is by a qualification key, not a production signature.
  • Downloading an image carries no node enrollment, Cell membership or right to any external service.
  • Integrated debugging, live system modification, heap-image restore, selfhost and physical-machine readiness are the Lisp-machine properties still to be evidenced.

AIUEOS repository · Awai Network OS page · source: aiueos 845204bb6, kotoba 75dbb8a0f