Looking for collaborators — decision-os-min

[Aliipou]

This is a call for collaborators on decision-os-min — the authority + audit PEP for autonomous systems that act.

Not a hiring round. Not an AGI-safety claim. A small runtime that must be attacked to stay honest.

What this repo is

An untrusted agent should not be able to send mail, move money, or deploy except through:

1. legitimacy (DENY-only) — should this happen at all?
2. authority — a signed, action-bound, one-time grant
3. PEP — execute only against that unspent grant
4. one hash-chained audit log

Cedar/OPA stay replaceable PDPs. They do not mint. The agent never holds the kernel key.

Explainer (static, no PEP): https://ali-decision-os-min.vercel.app
Why: https://github.com/Aliipou/decision-os-min/blob/main/docs/WHY.md
Show and tell: #2

Who we actually need

Role	What you would do
Red-team / security	Try to mint or run an effect without a valid signature + unspent token. Open an issue with a failing test, not a vibe.
Linux / isolation	TM-A is PARTIAL. Breakout and Host residuals remain. Help close a class of bypass, not one demo path.
Hosted agent plane	Intent → Admission → FDK → Auth → PEP. IPC abuse, replay, identity spoof.
PDP adapters	Cedar / OPA / builtin grants as grant-or-deny only. No second mint path.
Attestation / provenance	Inputs can lie. Help bind declared facts to evidence without putting research inside the kernel.
Docs / explainer	Keep claims sliced (tests ≠ proofs; TM-A full not claimed).

What we do not need

• A rewrite that turns this into a Cedar competitor
• A lock-in / preference layer that overrides a legitimacy DENY
• Marketing copy that says “no bypass anywhere” or “production-ready” without evidence
• Philosophy PRs that replace the injected-ethics rule (the book lives in freedom-theory)

How to join

1. Read CONTRIBUTING.md — try to break it, not to defend it.
2. Comment here with: what you want to attack, OS you can test on, and one link to prior work.
3. Or open a PR with a test that fails on main today and would pass after your fix.

Maintainer: Ali Pourrahim (@Aliipou).