Invite only · Alpha v0.1.5

The operator-grade
AI control plane for Linux.

Queue-driven. Approval-gated. Audited. Deterministic.
Voxera OS puts a policy layer between you and your AI — so every action is intentional, traceable, and safe to run daily.

OS: Voxera OS Core AI: Vera CLI: voxera Wake word (planned): "Hey Voxera"
voxera demo
$ voxera demo
 Queue healthy  ·  Daemon running  ·  Demo job queued  ·  Awaiting approval
Show demo commands
full demo walkthrough
# 1. Install
python3 -m venv .venv && source .venv/bin/activate
pip install -e ".[dev]" && make services-install

# 2. Run the demo (bootstraps queue + daemon)
voxera demo

# 3. Queue a job manually
$ voxera inbox add "Write a daily check-in note"
queued → notes/queue/inbox/job-1748.json

# 4. Process + approve
$ voxera daemon --once
$ voxera queue approvals list
$ voxera queue approvals approve <job_id>

# 5. Health check
$ voxera queue status
queue: healthy  ·  done: 1  ·  failed: 0  ·  approvals: 0

For complete run instructions, read the Operator Guide.

What Voxera OS does

AI should ask, not assume.

Three jobs. One coherent system. Every action stays inside the boundary you set.

📥

Turn intent into jobs

Natural language goals become structured queue jobs. The daemon processes them deterministically — one at a time, with a full audit trail.

🔒

Gate risk with approvals

Risky actions require explicit operator sign-off. Policy decides allow, ask, or deny at runtime. No job bypasses the gate.

📋

Prove what happened

Every job emits a structured bundle: mission plan, action timeline, stdout, stderr, and schema-versioned failure sidecars.

Why operators trust it

Reliability isn't a feature. It's the foundation.

Five shipped behaviors that make Voxera OS safe to run as a daily driver, not just a demo.

Deterministic queue lifecycle

Cancel, retry, prune, and reconcile — every bucket is inspectable and cleanable. No silent state transitions, ever.

Single-writer daemon lock + safe restart

One writer at a time. Graceful SIGTERM handling ensures the daemon shuts down cleanly, never corrupting queue state on restart.

Startup recovery + quarantine

Ambiguous jobs on startup go to quarantine — not silently re-run. No double-execution, no mystery failures on daemon restart.

Brain fallback classification

When AI falls back, you see exactly why: TIMEOUT, AUTH, RATE_LIMIT, MALFORMED, NETWORK, or UNKNOWN — never a silent failure.

Non-destructive setup wizard

Keep, skip, or replace — per-provider. The setup wizard never overwrites existing configuration without asking first.

Architecture

Three layers.
One coherent system.

Voxera OS runs alongside your Linux — not in place of it. The substrate stays standard. You stay in control.

01
Substrate OS

Your Linux stays standard. Ubuntu, Fedora, or any distribution. Voxera sits alongside it — never replacing drivers, filesystem, or networking.

02
AI Control Plane

Vera routes your intent through policy-aware queues, cloud planning, and approval gates. This is Voxera OS — the layer that makes AI trustworthy.

03
Experience Layer

CLI today, voice tomorrow. Operators start with voxera CLI and the web panel — and grow into "Hey Voxera" when voice ships.

Built on

LanguagePython ≥ 3.10
CLI + UITyper + Rich
Web panelFastAPI + Uvicorn
AI backendsGemini, OpenAI-compat, Ollama
SandboxPodman rootless
Servicessystemd user units

Meet Vera →

Roadmap

Where this is going

Stability before scale. We build operator trust before expanding capabilities.

Now · Solid

Operator-grade baseline

  • Queue railguard: lifecycle, prune, reconcile
  • Daemon reliability: single-writer lock, graceful shutdown
  • HITL approval gating + structured audit bundles
Next · v0.1.6

Security + visibility hardening

  • Panel auth rate limiting + hardened endpoints
  • Ops health dashboard in panel
  • Health degradation signals + backoff
Later · v0.3

Voice stack

  • STT/TTS integration
  • Wake word detection: "Hey Voxera"
  • Voice-first command loop

View full roadmap →

Invite only

Ready to run Voxera OS?

We're running a private alpha with a small group of operators. Sign up and we'll reach out when your spot opens — or go straight to Quick Start if you already have access.

No spam. No obligations. We'll reach out when your spot is ready.