// the find
osaurus-ai/osaurus
Own your AI. The native macOS harness for AI agents -- any model, persistent memory, autonomous execution, cryptographic identity. Built in Swift. Fully offline. Open source.
Osaurus is a native macOS app that wraps any LLM — local or cloud — with persistent memory, agent loops, a sandboxed Linux VM for code execution, and a cryptographic identity system. It targets developers who want a local-first AI harness that isn't Electron and doesn't phone home. Requires Apple Silicon and macOS 15.5+.
The sandbox using Apple's Containerization framework (vsock bridge, per-agent Linux user isolation) is the right call — agents can actually run code without risking the host. The memory architecture is unusually thoughtful: three-layer design with salience scoring, background consolidation, and a ~800-token injection budget per turn, which avoids the context-bloat problem that kills most naive memory implementations. The cryptographic identity chain (secp256k1, iCloud Keychain root, scoped access keys with revocation) is real infrastructure, not theater. The privacy filter using a sparse-MoE model on-device with fail-closed behavior before cloud sends is the kind of detail that shows someone actually thought about threat models.
The sandbox requires macOS 26 (Tahoe), which as of mid-2026 is still in beta — so the headline feature that differentiates Osaurus from every other chat UI doesn't work on most production machines yet. The relay through agent.osaurus.ai is a centralized dependency for a project whose pitch is 'own your AI' — if that relay goes down or the company folds, internet-exposed agents stop working. The plugin ABI is already on v3 with v1/v2 compat shims, which on a project this young suggests some churn in the extension model that contributors will have absorbed as pain. No Android or Windows support is obvious given the Swift/Apple stack, but the README doesn't acknowledge this as a limitation at all, which will surprise people who read the 'own your AI' pitch and assume it's platform-neutral.