AI agent operations for real work in mission environments.
Colossus is an alpha-stage runtime for organizations that need agents to act under explicit authority, inside enforceable boundaries, with durable evidence of what happened. It brings models, tools, policy, approvals, sandboxing, state, and audit into one system that can operate online or offline.
The project is being built for serious enterprise and public-sector deployment, including regulated, disconnected, and security-sensitive environments. It ships as a Rust binary with a CLI and terminal UI; a Tauri desktop app and authenticated SDKs use the same runtime and security model.
Warning
Colossus is alpha software. Behavior, configuration, storage formats, APIs, and user interfaces may change between releases. Review the upgrade and compatibility guide before updating an installation you depend on.
Install the latest stable release on macOS or Linux:
curl -fsSL https://github.com/obscuritylabs/Colossus/releases/latest/download/colossus-install.sh | shOn Windows PowerShell:
irm https://github.com/obscuritylabs/Colossus/releases/latest/download/colossus-install.ps1 | iexIf you prefer to inspect the installer first, need an exact version, or use Nix, start with the installation guide.
Then initialize Colossus in a repository and run the built-in offline provider:
cd your-repository
colossus config init
colossus run "Reply with exactly: ready"
colossus audit verifyThat first run needs no API key or network connection. It creates workspace-isolated state under your owner-private Colossus home and verifies the journal that recorded the run. Launch the terminal UI with:
colossusSee Colossus home and workspace resolution for the configuration load order, state layout, and repository instruction boundary.
Important
Fresh schema-version-2 configurations currently default to allow_all with the
acknowledged danger_full_access execution boundary. Authorized tools can therefore
reach host resources outside the selected workspace. If that is not appropriate,
initialize with --sandbox-profile workspace-development or
--sandbox-profile offline-default. Read Access and
approvals and
Sandbox before granting an agent broader authority.
Continue with the five-minute quickstart, connect a model, or choose the Desktop setup.
Direct installations can check for or apply a stable update with:
colossus update check
colossus update- Accountable effects. Requested actions, decisions, approvals, execution, release, and uncertain outcomes produce durable evidence.
- Bounded execution. Strict tool schemas, one-use permits, sandbox profiles, resource ceilings, and quarantined output keep authority explicit.
- Durable operations. Sessions, plans, goals, delegated agents, workflows, memories, and research survive restarts and can be reconstructed from canonical state.
- Online or offline deployment. Connect hosted providers, run local models, or prepare controlled and air-gapped environments without changing the authorization path.
- Enterprise integration. Add application clients, search routes, integrations, MCP servers, skills, signed packs, and versioned YAML workflows through declared boundaries.
| If you want to… | Start here |
|---|---|
| Run one task or produce machine-readable output | Agent runs |
| Work interactively in a terminal | Terminal UI |
| Use a folder-first native app | Desktop |
| Build durable automation | Workflows |
| Integrate another application | Application SDK |
| Understand the trust boundaries | Security architecture |
- Get started: installation, first run, and model setup
- Use Colossus: sessions, plans, goals, memory, and research
- Automate and extend: workflows, skills, integrations, MCP, packs, and registries
- Administer and secure: configuration, access, sandboxing, storage, audit, and troubleshooting
- Reference: CLI, TUI, schemas, formats, and limits
- Develop: architecture, source setup, testing, and releases
The complete documentation is also available at obscuritylabs.github.io/Colossus.
Colossus uses Rust 1.96 and edition 2024. From a source checkout:
cargo build --workspace
cargo xtask devRun cargo xtask check rust before declaring a Rust change complete. The
contributor guide explains the architecture rules,
focused test tiers, Desktop checks, and pre-PR gate.
Build or preview the documentation with its pinned containerized toolchain:
./scripts/docs-site build
./scripts/docs-site serveSee the changelog for release history. Report vulnerabilities through the private process in SECURITY.md.
Colossus is licensed under the Apache License 2.0.