AgentOS v0.2.0

Added

• Schedules. A standing instruction to give an agent the same objective on a cadence — once, a
  fixed interval, or a cron expression read against UTC or local time. Each firing creates its own
  task. agentos schedule create | list | pause | resume | delete | run.
• Task graphs. Tasks can wait for other tasks. A DAG rather than a tree, with cycles refused when
  an edge is written and the whole path named in the error. agentos task create --depends-on.
• A scheduler. Fires due schedules, starts tasks whose dependencies have succeeded, and cancels
  branches whose dependency failed rather than leaving them waiting.
• An install script. scripts/install.sh fetches the CLI build for the current platform from
  the release, verifies the published checksum before unpacking it, and installs to
  ~/.local/bin without root. AGENTOS_INSTALL_DIR and AGENTOS_VERSION override where and
  which.

Security

• A scheduled run happens with nobody present, so it is driven behind a gate that refuses every
  approval. Anything the policy permits outright proceeds; anything that would have asked a person
  is denied with a note the agent can read. There is no setting that changes this, which means the
  policy is the whole of the control for unattended work. See SECURITY.md.

See CHANGELOG.md for what is in this
release, and SECURITY.md for what
AgentOS does and does not defend against. Read the second one before pointing an agent at anything
you care about.

What to download

You want	Take
The desktop application, macOS	AgentOS_*_universal.dmg
The desktop application, Windows	AgentOS_*_x64-setup.exe or the .msi
The desktop application, Linux	agent-os_*_amd64.deb or the .AppImage
Just the agentos CLI	agentos-*-<your-target>.tar.gz, or .zip on Windows

Every CLI archive ships a .sha256 beside it. Verify before running:

sha256sum -c agentos-<version>-<target>.tar.gz.sha256

These builds are not code-signed

AgentOS has no Apple Developer certificate and no Windows code-signing certificate, so the installers
are unsigned. That is a real cost and it is stated plainly rather than buried:

• macOS will refuse to open the app on first launch. Right-click the application and choose Open,
  or clear the quarantine attribute yourself:

  xattr -dr com.apple.quarantine /Applications/AgentOS.app

• Windows SmartScreen will warn that the publisher is unknown. More Info → Run anyway.

Neither step is something you should perform on software you have not decided to trust. Building from
source is supported and takes one command — see the README.