Identity, memory, custody, payments, and execution — primitives, not bolt-ons. Rust-native, event-sourced, MIT licensed.
The substrate
Every subsystem implements traits from aios-protocol — the contract that defines events, state, policy, and the agent lifecycle. Swap or extend any part without breaking the rest.
Anima Identity
Soul, dual keypair (P-256 auth + secp256k1 wallet), DID, custody trait with 6 backends.
Arcan Runtime
Agent loop — reconstruct from journal, call provider, execute tools, stream events.
Lago Persistence
Append-only event journal, content-addressed blobs, knowledge index, multi-format SSE.
Haima Finance
x402 machine-payments, secp256k1 wallets, per-task billing, on-chain settlement.
Autonomic Homeostasis
Three-pillar regulation — operational, cognitive, economic. Hysteresis anti-flapping.
Praxis Tools
Sandbox, hashline editing (Blake3), SKILL.md registry, MCP server + client bridge.
Vigil Observability
OpenTelemetry tracing, GenAI semantic conventions, contract-derived spans.
Spaces Networking
SpacetimeDB 2.0 fabric, real-time agent communication, RBAC channels.
Just shipped · 2026-05-02
An agent's identity now ships with the same custody discipline a human's does. Six backends span browser, server, desktop, and hardware. Rotation and revocation are first-class events. A single canonical multi-curve verifier (lago-auth) replaces ad-hoc JWT validation across the stack.
Dev / single-host
InProcessAnima
Master seed → P-256 auth + secp256k1 wallet, ChaCha20-Poly1305 at rest.
Server-side
VaultTransitAnima
HashiCorp Vault Transit — keys never leave the KMS. Per-user namespaces.
Desktop
TpmAnima
PKCS#11 against the host TPM. Auth-key never reveals the scalar.
Browser
WebCryptoAnima
Passkey-managed, non-extractable. Wallet ops delegated to RemoteAnima.
High-stakes
HardwareWalletAnima
Ledger over hidapi. Every wallet op is hardware-confirmed.
Multi-tenant
SomaCustody
soma admin custody-oracle UDS. SO_PEERCRED + group-based authn.
L4-D5 split-custody for browser deployments · L4-D6P-256 ECDSA across the stack · L4-D10 anima.identity_rotated with rotation_proof_jws signed by the old key. Full spec at docs/superpowers/specs/spec-d.
Start building
# Clone and verify the substrate.
git clone https://github.com/broomva/life.git
cd life && cargo test --workspace
# Generate an agent identity (anima).
cargo run -p arcan -- identity new
# Boot the runtime (arcand) on :3000.
cargo run -p arcand -- --port 3000Every event your agent emits is replayable from the journal. No mutable state, no hidden side effects, no LLM call needed to reconstruct yesterday's session. That's the OS thesis.
See it run
Each demo opens a three-column agent workspace — streaming chat, live filesystem and journal, identity + economic + reasoning inspectors on the right.