PPilotMain
BetaAI infrastructure

AethOS

An agent with production access you can defend in a review

Who it's for
Platform and DevOps engineers who want an AI agent operating real infrastructure, and who personally have to answer for whatever it did at 3am.
The problem it solves
An LLM with deploy rights is a liability. Most agentic ops tools offer no approval gate, no evidence trail, and no way to reconstruct why a service was restarted — so the honest answer to 'can I let this touch production?' is no, and the tool goes unused.

A secure operational intelligence platform — not a chatbot wrapper and not an unrestricted shell. Multi-channel intents from chat, Telegram, and Mission Control converge on one orchestration brain with read-only-first engineering analysis and explicit approval for anything that writes. Works with Anthropic, OpenAI, OpenRouter, or local models. Runs on your machine, against your keys, under your policy.

Apache 2.0, self-hosted. You run it on your own machine against your own provider keys — there is no hosted tier to sign up for.
Web App

Latest release 1.0·August 15, 2026

PilotMainCatalogue
PursuitCueSmall cleaning companies
TrueConformOnline shops & agencies
AethOSPlatform & DevOps engineers
PreviewSmithIndie app developers

Every product names its customer

AethOS — primary view

What it does

AethOS routes every operational action through a governed lifecycle: read-only analysis first, mutation preflight, explicit human approval, then evidence and an audit artifact. Unrestricted shell and auto-merge are blocked by design, not by configuration.

Why it's different

  • Human approval required for every mutation — enforced, not advisory
  • Evidence and audit artifacts generated before action, not after
  • Unrestricted shell, auto-merge, and silent background coding are blocked

Core capabilities

Each capability maps to a concrete screen in the app.

Governed lifecycle

Channels → orchestration → policy → provider runtime → evidence → verification → audit.

Read-only first

Analysis never needs write access. Writes require a preflight and an explicit approval.

Mission Control

One console for what the agent proposes, what you approved, and what it did.

Your keys, your machine

Self-hosted under Apache 2.0. No data leaves infrastructure you control.

Access

Apache 2.0, self-hosted. You run it on your own machine against your own provider keys — there is no hosted tier to sign up for.

Web App

What you need

macOS or Linux, Python 3.11+. Bring your own provider key.

Official PilotOS build. Download desktop installers only from the links on this page. Buttons use a stable PilotOS URL first, then redirect to the official file host (downloads.pilotmain.com). Always use the latest version for fixes and security updates.

  • Version 1.0 · Channel beta
  • Release status Beta
  • Last updated
  • Requirements macOS or Linux, Python 3.11+. Bring your own provider key.