hearth v1.0.0
hearth 1.0 🔥
Local LLMs and autonomous agents on NixOS: sandboxed by default, every run audited, the whole OS reproducible from one flake.
hearth is stable. What started as a declarative way to run local agents safely is now a complete local AI platform, and the surface is solid enough to call 1.0.
What hearth does
- Sandboxed agents. Ephemeral systemd units with a written threat model: no writes outside their workspace, no host secrets, no privilege escalation. Permission modes (plan / auto / bypass), an approvals queue, and a kill switch.
- Every run audited to local SQLite: tokens, cost, latency, errors.
- Reproducible whole-OS flake with atomic, bootloader-level rollback.
- OpenAI-compatible API. Point Cursor, Continue, or the
openaiSDK at hearth and use your local models, with real token streaming and full auditing. - Knowledge base (RAG). Ingest docs or a whole repo; semantic retrieval via local embeddings with lexical fallback; auto-recalled into agent context.
- Standing missions. A scheduler that runs missions on a cadence, the works-while-you-sleep layer.
- Self-improvement. An always-on loop proposes changes to hearth's own config, validates them with
nix flake check, compounds and learns, and produces reviewable branches with one-click promote-to-live and an auto-rollback watchdog. - Observability. A Prometheus
/metricsendpoint, a usage-over-time view, andhearth-doctorfor a one-command health check. - Local and private throughout. Ollama on your own GPU, nothing leaves the box.
Honest about the ceiling
Local model quality is the real limit, not the platform. The swarm (decompose hard work into small parts) is the mitigation, and the credential + OpenAI tooling let you reach a stronger model for one hard step when you choose to. Autonomous changes are always gated and only ever produce reviewable branches; they never alter a running system on their own.
Getting started
Docs: https://ericfinland.github.io/hearth/ · Full history: CHANGELOG
git clone https://github.com/EricFinland/hearth
cd hearth
nix flake checkChange the default console password on first boot (see SECURITY.md). Thanks for trying hearth.