ZOTHOS v3.2.0

ZOTHOS v3.2.0

Debian 13 (Trixie) + KDE Plasma 6.3 live/installable ISO (x86_64, hybrid UEFI/BIOS) with local AI agent tooling and ~75 curated security tools. 94 commits since v3.1.0.

Security & defaults

• Default-deny ufw baked into the image; network services enabled by packages (BeEF, nginx, docker, kismet) now disabled by default.
• Ollama bound to 127.0.0.1:11434; wildcard OLLAMA_ORIGINS removed.
• apt signature checks on, with fingerprint-pinned Kali/Parrot keys over https; installers force https + TLS 1.2 + fail-fast.
• zoth-bridge: removed /api/exec; token-gated allowlisted launches with Host/Origin checks. Zoth OS desk blocks cross-origin / DNS-rebinding POSTs.
• Electron apps: 14 apps moved to contextIsolation with nodeIntegration off and per-app preload allowlists; renderer input validated before reaching a shell; remote navigation/new windows blocked.
• Honest SECURITY.md (documents boot password reset and NOPASSWD sudo).

Fixes

• zoth-auth-init no longer recursively chowns established homes at boot (was hitting the 15 s timeout).
• Launchers: agent-tool terminals close cleanly on Ctrl+C (Konsole), TryExec on optional tools, Plymouth Phoenix launcher had empty Exec, pet menu actions validated.
• Fonts pinned (DejaVu, Noto Color Emoji, Symbola) so splash/UI glyphs don't render as tofu.
• Plasma QML TabBar binding loop fixed; cursor daemon polling throttled.
• ShellCheck pass across scripts (CI now fails on ShellCheck errors).

New / packaged

• Firmware for MT7612U / RTL8812AU USB Wi-Fi adapters (firmware-mediatek, firmware-misc-nonfree).
• Packaged local services: neuro-memory-daemon, agent-flight-recorder, agent-capsule-jail, agent-policy-auditor, agent-budget-sentinel, MCP Lens, Etsy POD Forge/Connector.
• MCP server catalog (152 entries) shipped, all disabled by default.
• zothos-join-iso.sh to reassemble split ISO parts with clear errors.

Docs & supply chain

• Replaced unverified marketing claims with accurate statements; README tool count corrected to 75+.
• CI/CodeQL/Semgrep/Scorecard/SBOM workflows SHA-pinned; keyless cosign signing of SHA256SUMS via release-sign.yml. Reproducible builds: in progress (see REPRODUCIBLE_BUILDS.md).

Download

The ISO is split into <2 GB parts (GitHub asset limit). Download all zothos-3.2-amd64.iso.partNN files plus zothos-join-iso.sh and SHA256SUMS into one folder, then:

bash zothos-join-iso.sh   # reassembles and checks the ISO SHA-256

Verify the signature: see docs/VERIFYING.md (cosign verify-blob with the SHA256SUMS.cosign.bundle).

Also: Zoth Studio https://zoth.nullai.tech · CLI npx @nullaitech/zoth

ZOTHOS v3.1 Master Release — Sovereign AI Telemetry & Cognitive Cockpit

✦ ZOTHOS v3.1 Master Release — Sovereign AI Telemetry & Cognitive Cockpit

ZOTHOS v3.1 introduces a groundbreaking cognitive telemetry pipeline, the zero-math Visual Cockpit, an interactive 3D particle desktop canvas, cinematic boot splash transitions, and hardened system authentication.

---

🌟 Key Highlights & Major Additions

🔬 1. Mathematical AI Pillar HUD & Grounded Telemetry Engine

• Kernel-Grounded Process Metrics: Eliminates synthetic heuristics in favor of live /proc/<pid>/statm RSS readings for Ollama, Python, Cursor, and Antigravity processes.
• Empirical Attention Entropy & Perplexity: Real-time computation of Shannon entropy $H(A) = -\sum p_i \log_2 p_i$ and Bigram Perplexity $PPL = 2^{H(A)}$ over live model reasoning traces.
• Timestamp-Grounded Velocity: Measures true instantaneous token generation rates ($v_T = \Delta \text{tokens} / \Delta t$) by parsing consecutive ISO timestamps.
• Multi-Agent Neural Mesh Support: Native scraping and live UDP/HTTP telemetry ingestion for Google Antigravity, Cursor IDE, Ollama, and Zoth-Sentinel.

💡 2. "Visual Cockpit" Mode (Intuitive Non-Math Interface)

• 🎯 AI Brain Focus & Clarity Dial: Segmented 4-stage color spectrum (Confused ➔ Searching ➔ Focused ➔ Laser Sharp) showing instant certainty percentages (e.g. 98% Sure) and plain-English clarity status.
• 🚀 Thought Speedometer & 🔋 Memory Fuel Tank: Speedometer reading in simple words/sec with turbo badges, plus an automotive-style conversation fuel gauge showing memory saturation.
• 🪜 4-Stage Thinking Journey Stepper: Animated visual pipeline tracking what the AI is doing in real-time (1. 👁️ Reading ➔ 2. 🧠 Planning ➔ 3. 🔧 Executing ➔ 4. ✨ Answering).
• 💬 Plain-English Activity Feed: Human-readable action cards explaining what happened and why, with click-to-expand mathematical proof drawers.

🌌 3. Celestial 3D Interactive Wallpaper & UI Polish

• Dynamic Gold Mouse Trails: Interactive celestial particle engine tracking cursor motion across the Sovereign Intelligence background canvas.
• Reboot Persistence: Autostart hooks guaranteeing the interactive canvas persists across user sessions and reboots.
• Cinematic 60fps Boot Splash: High-definition Plymouth theme with vector star glyphs and matrix transitions.

🛡️ 4. Security & System Hardening

• PAM Lock Screen Resolution: Enforced root:shadow 2755 SGID permissions on unix_chkpwd across live and installed environments.
• SUID Sandbox Hardening: Guaranteed permissions for Electron and Chromium sandbox helpers.
• Sovereign Vault & Secret Injection: Argon2id + ChaCha20-Poly1305 encrypted secret manager (zoth-vault).

---

💿 ISO Image & Verification

• Filename: zothos-3.1-amd64.iso
• Architecture: x86_64 (AMD64)
• Format: Hybrid ISO (UEFI Secure Boot + Legacy BIOS MBR)
• Kernel: Linux 6.12.111+deb13-amd64
• Default Live Credentials: User zoth | Password zoth (Root: zoth)
• Secondary User: User azoth | Password zoth

SHA256 Verification Checksum:

44ab8e7bf2e50e1096ebea16b258133ed57aecd910a6b2178c3f3f65736ba1fc  zothos-3.1-amd64.iso

---

📦 Download & Reassembly Instructions

Due to GitHub's 2 GiB per-asset release limit, the 8.5 GB hybrid ISO is packaged in GitHub-compliant split chunks:

1. Download all files:
   • zothos-3.1-amd64.iso.part00
   • zothos-3.1-amd64.iso.part01
   • zothos-3.1-amd64.iso.part02
   • zothos-3.1-amd64.iso.part03
   • zothos-3.1-amd64.iso.part04
   • zothos-3.1-amd64.iso.sha256
   • zothos-join-iso.sh
2. Run the automated reassembly helper:

   bash zothos-join-iso.sh

   Or combine manually:

   cat zothos-3.1-amd64.iso.part* > zothos-3.1-amd64.iso
   sha256sum -c zothos-3.1-amd64.iso.sha256

3. Flash to USB drive using Balena Etcher, Rufus, or dd:

   sudo dd if=zothos-3.1-amd64.iso of=/dev/sdX bs=4M status=progress conv=fsync

---

✦ Sovereign Mind. Sovereign Code. Sovereign Silicon. ✦

ZOTHOS v3.0 Master Release — Sovereign Alchemical Intelligence

✦ ZOTHOS v3.0 Master Release — Sovereign Alchemical Intelligence

ZOTHOS v3.0 represents a quantum leap in sovereign computing, dual-stack offensive security parity, frontier agentic development, and hardened privacy engineering.

---

🌟 Key Highlights & Major Additions

🛡️ 1. Sovereign Vault & Cryptographic Secret Daemon

• Argon2id + ChaCha20-Poly1305 Core: Military-grade, side-channel resistant local secret storage written in high-performance Rust.
• In-Memory Process Injection: Zero-disk-leak secret injection for commands and autonomous agent sessions via zoth-vault run -- <command>.
• Multi-Vault Federation: Unified interface supporting Zoth Sovereign Vault, Bitwarden CLI (bw), KeePassXC encrypted databases (.kdbx), and UNIX Pass (gpg).
• Desktop Workstation: One-click launchable desktop station with real-time Shannon entropy meter and dynamic provider categorization.

🤖 2. Frontier AI Coding & Autonomous Swarm Studio

• Aider AI Coding Agent: Full interactive dual-mode workstation pre-configured with local LLM support via Ollama and API token providers.
• Frontier Agent Suite: Pre-integrated launchers and runtime configurations for Google Antigravity (agy), Anthropic Claude Code, OpenAI Codex, OpenCode, Cline, and Hermes Agent.
• Ollama DeepSeek & Llama Backends: Pre-wired systemd service and model acceleration.

☁️ 3. Full-Stack Web & Edge Deployment Suites

• Netlify CLI Serverless Studio: Pre-bundled Netlify CLI v26 with interactive project initialization, edge function testing, serverless function debugging, and live deployment pipeline.
• Streamlit Studio: Cyber-styled machine learning interactive studio with bundled telemetry and live sensor dashboards (zoth-streamlit).

🧅 4. Complete Tor Privacy Browser & Ghostmode Profiles

• Pre-bundled Tor Browser: Official standalone Tor Browser v15.0.4 pre-extracted, hardened, and pre-packaged with amnesic profile routing.
• Environment & Stealth Profiles:
  • [1] gold / default: Sovereign 24K Celtic Gold Master environment.
  • [2] ghost / stealth: NullAI Ghostmode (Amnesic Stealth, Tor-Cloaked, all telemetry severed).
  • [3] matrix: Hermetic Matrix (Digital Rain, Phosphor Emerald).
  • [4] incognito / win11: Chameleon Disguise (Covert Windows 11 Fluent interface).
  • Instant terminal toggle via zoth-mode toggle.

🎨 5. Bespoke 24K Gold Kickoff Menu & UI Polish

• High-Definition Celtic Gold Insignia: Custom-designed 24K golden icons for every category in the KDE Plasma Kickoff menu (Development, Education, Favorites, Graphics, Help, Internet, Leave, Misc, Multimedia, Pentesting, Places, Power, Restart, Settings, Sleep, System, Utilities).
• Calamares 24K Gold Installer: Graphical system installer with full-disk LUKS encryption, Btrfs subvolumes, and automated GRUB/systemd-boot config.

📚 6. In-House ZothOS Codex Manual v3.0

• Complete offline desktop and terminal manual accessible via zoth-docs with real-time fuzzy search, dark gold luxury styling, and 11 comprehensive chapters.

---

💿 ISO Image & Verification

• Filename: zothos-3.0-amd64.iso
• Architecture: x86_64 (AMD64)
• Format: Hybrid ISO (UEFI + Legacy BIOS)
• SquashFS Compression: XZ High-Density
• Kernel: Linux 6.12.107+deb13-amd64
• Live Desktop User: neo (password: zoth)
• Root Password: zoth

SHA256 Verification Checksum:

46f3666828dc555c7a7d3fbe01fa2a0bd487e2017b2c8f270aa40feadac30cf5  zothos-3.0-amd64.iso

---

✦ Sovereign Mind. Sovereign Code. Sovereign Silicon. ✦