{
  "ok": true,
  "role": "product",
  "slug": "azos",
  "name": "AZ-OS",
  "version": "0.3.0",
  "one_line": "Read ethics status and open a prefab isolate session folder.",
  "author": "Aziel Eliab",
  "identity": "Aziel Eliab",
  "aka": "Aziel Elroi Eliab",
  "license": "Apache-2.0",
  "github": "https://github.com/AzielEliab/azos",
  "skill_url": "https://aziel-runtime.vibelock.workers.dev/v1/pull/azos/skill",
  "worker_skill": "https://azos-download-tracker.vibelock.workers.dev/v1/skill",
  "skill": "---\nname: AZ-OS\ndescription: Use when calling the AZ-OS ethics-coded remote shell (hosted /v1 or local package). Dual surface: Worker /v1 + catalog MCP. This Worker /v1/mesh/* PROXY to aziel-runtime via AZIEL_RUNTIME. The proxy forwards the runtime document and does not rewrite its mode flags. AZ-OS mesh_node_live stays false. Local fallback default OFF. QNM-BUILD-1.0 live|locked|isolated. QNS-CD-1.0 photon QNS1 hub cite (qnm-node qnsd; no public proxy). No Node Gate. No auto-heal. Not anonymity. Sessions and commands are principle-bound. Author Aziel Eliab.\n---\n\n# AZ-OS\n\nIntegrity precedes execution. Author: **Aziel Eliab**.\n\n**THIS IS:** prefab AZ-OS — ethics-coded remote shell with all Aziel software hooked in. Windows-style desktop; sigil / brand mark (rose-star, no words). TemporalLock×StaticClock integrity lattice. Sessions and commands are principle-bound.\n\n**THIS IS NOT:** a kernel, bootloader, hypervisor, worm, malware, unrestricted host bash, or SSH. Hosted `/v1` does not increment downloads or views.\n\nAlways send `User-Agent: Mozilla/5.0`. Cloudflare Workers may 403 an empty agent.\n\n## Honest scope\n\n| Layer | What it is |\n|-------|------------|\n| Protocols | HTTPS JSON (this Worker), HTTP loopback `127.0.0.1:8800` (AZ Interface), CLI stdin (`azos shell`) |\n| Auth | ARC 32-byte token issued only after the five ethics gates PASS. Hashed at rest. |\n| Sandbox | Session vfs (local `.azos/workspace/<id>/`, hosted KV vfs). Closed verb list. No host subprocess. |\n| Halt | Stops overlay / session authority. Does not kill the caller OS. |\n\n## Call these URLs\n\n- Worker OpenAPI: https://azos-download-tracker.vibelock.workers.dev/openapi.json\n- Catalog OpenAPI: https://aziel-runtime.vibelock.workers.dev/openapi.json\n- MCP: `POST https://aziel-runtime.vibelock.workers.dev/mcp`\n- Live skill (this markdown): `GET https://azos-download-tracker.vibelock.workers.dev/v1/skill`\n- Suite mesh: `GET https://azos-download-tracker.vibelock.workers.dev/v1/mesh` (PROXY; forwards the runtime document; AZ-OS mesh_node_live stays false; local fallback default OFF; QNS-CD-1.0 hub cite)\n\nOps (do **not** increment downloads or views):\n\n- `GET /v1/health` — liveness + scope\n- `GET /v1/skill` — this file\n- `GET /v1/mesh` — PROXY suite mesh status. Forwards the runtime document and does not rewrite its mode flags. AZ-OS mesh_node_live stays false. Local fallback default OFF. QNM live|locked|isolated. QNS-CD-1.0 photon QNS1 hub cite (local qnsd in qnm-node; runtime cites in aziel-runtime). Does not install a mesh node. No public qnsd proxy.\n- `GET /v1/mesh/nodes` — PROXY Live Nodes roster (5-minute presence). Payload includes the QNS-CD-1.0 cross-map.\n- `POST /v1/mesh/{enable,disable,join,heartbeat,leave,broadcast}` — PROXY. Bearer required to enable. No auto-heal. Anon-broadcast is not a publish path.\n- `POST /v1/status` — read-only status / principles (no exec)\n- `POST /v1/session` — open an ethics-gated shell session\n- `POST /v1/exec` — run one principle-bound command in that session\n- `POST /v1/close` — close a session\n- Product POSTs listed in OpenAPI (`invite`, `halt`, `revoke`)\n\nWorks with ChatGPT (GPT Actions / OpenAI), Grok (xAI), Venice, Claude (Anthropic), Cursor (MCP), Glama (MCP), Perplexity, Microsoft Copilot / Bing, Google Gemini / Vertex, Mistral, Meta AI, Apple Intelligence surfaces, Amazon Q tooling, DuckAssist, You.com, Cohere, and other MCP/OpenAPI-capable assistants. Import OpenAPI as a custom tool, use GPT Actions, HTTP tools, or MCP. Catalog MCP `mesh_*` + FragGate `slug=mesh`. The mesh proxy forwards the runtime document. AZ-OS mesh_node_live stays false. Local fallback default OFF. QNM-BUILD-1.0 live|locked|isolated. QNS-CD-1.0 photon QNS1 hub cite (qnm-node qnsd; no public proxy). No Node Gate. No auto-heal. Not anonymity. Author: Aziel Eliab only.\n\n## Example\n\n```bash\ncurl -s -A 'Mozilla/5.0' https://azos-download-tracker.vibelock.workers.dev/v1/health\ncurl -s -A 'Mozilla/5.0' https://azos-download-tracker.vibelock.workers.dev/v1/skill\ncurl -s -A 'Mozilla/5.0' https://azos-download-tracker.vibelock.workers.dev/v1/mesh\ncurl -s -A 'Mozilla/5.0' -X POST https://azos-download-tracker.vibelock.workers.dev/v1/session \\\n  -H 'content-type: application/json' \\\n  -d '{\"actor\":\"operator\",\"definition\":\"Open an ethics-gated shell session.\",\"evidence\":\"Operator requested a principle-bound remote shell.\",\"impact\":\"Hosted KV vfs only. No host subprocess.\"}'\n```\n\n## Local (after one-click install)\n\n```bash\ncurl -fsSL https://azos-download-tracker.vibelock.workers.dev/install.sh | bash\nazos ui\nazos shell --actor operator -c 'help'\nazos doctor\n```\n\nThen open http://127.0.0.1:8800 (loopback only).\n\n## Offline node client (local package)\n\nAZnet is the sidenet. **AZ Browser** is the browser surface for AZnet. `azos node` is a local hash client for that sidenet. It is not the hosted AZNet engine, it does not include AZ Browser, and it does not add a Softwares desk card. The AZ-OS layers stay `base`, `stacked`, and `standalone`.\n\n| Layer | Need |\n|---|---|\n| `base` | Host OS stays the host OS. Local garden under `.azos/node/`. |\n| `stacked` | Same garden. L0 FragGate HTTPS remains the online door. |\n| `standalone` | Same garden. No shell session. Desk unchanged. |\n\n`azos node probe` is GET /v1/health only. It does not call a FragGate op. Online calls still use `https://aziel-runtime.vibelock.workers.dev/v1/fraggate/call`.\n\n## News and the map\n\nAZ-OS has a joined path and two standalone paths. AZNews can stand alone. 4DMap can stand alone. On the joined path, AZ-OS points at the runtime 4DMap engine (`slug=4dmap`, ops `news_pin` and `news_open`). A news item can become a map pin (date, event, and place), or a pin can open the matching news. This is not a second app and not a copy of the engine. This package does not claim the aziel-runtime side is done. 4DMap is not marked installed. `azos.news_source` can GET a standing feed. That feed has no score and no place, so the news source stays absent and AZNews and 4DMap stay not joined until a complete fetched item lands. A fixture is not that item and does not flip the live flag. The userspace base is present. That is a base, not a boot. The kernel base is absent. This has not booted. This is not installed as an operating system. An alternative internet is not live (alt_internet_live is false). A packet path is not live (packet_path_live is false). This isolate cannot see host hardware (worker_hardware is false). Still missing: a packet that leaves this machine and arrives on a different machine id. A same-machine mesh frame does not count. Cap-7 and .aziel stay names, not a public registrar and not ICANN or BGP. WireGuard, OpenVPN, an L3 exit pool, kernel UDP, and TUN/TAP stay SLOT. Public mail send, the kernel, and boot stay not live. The public door stays FG-STUB. Isolation is single-node security-awareness. Phoenix is a local wait and re-seal. That is not a loopback fence. Mail is not sent from here. One-click install is not live. This is not a live mesh node. A process receipt, a loopback bind, and a userspace file are not a host kernel. AZ Interface is a separate shell. It is not this kernel and not this boot. `azos news`, `azos map`, and the local page at http://127.0.0.1:8800/ say this in plain language.\n\nCounted download (gzip HTTP 200, no 302): https://azos-download-tracker.vibelock.workers.dev/download?asset=azos-0.3.0.tar.gz\nGitHub: https://github.com/AzielEliab/azos\n\nLicense: Apache-2.0. Forks welcome. No Zenodo DOI is claimed.\n",
  "download": "https://azos-download-tracker.vibelock.workers.dev/download",
  "cite": "https://azos-download-tracker.vibelock.workers.dev/cite.json",
  "llms": "https://azos-download-tracker.vibelock.workers.dev/llms.txt",
  "sitemap": "https://azos-download-tracker.vibelock.workers.dev/sitemap.xml",
  "count": "https://azos-download-tracker.vibelock.workers.dev/count",
  "install": "https://azos-download-tracker.vibelock.workers.dev/install.sh",
  "install_sh": "curl -fsSL -A 'Mozilla/5.0' -o install.sh https://azos-download-tracker.vibelock.workers.dev/install.sh",
  "install_inspect": {
    "url": "https://azos-download-tracker.vibelock.workers.dev/install.sh",
    "downloads": "That product Worker's install.sh. Typical next fetch is the counted /download on the same hostname. Not aziel-runtime. This runtime has no pipe installer.",
    "steps": [
      "curl -fsSL -A 'Mozilla/5.0' -o install.sh https://azos-download-tracker.vibelock.workers.dev/install.sh",
      "Inspect install.sh (URLs, write paths, checksums if present).",
      "bash install.sh"
    ]
  },
  "update_check": "https://aziel-runtime.vibelock.workers.dev/v1/update/check?slug=azos&version=0.3.0",
  "software": "https://aziel-runtime.vibelock.workers.dev/v1/software",
  "openapi": "https://azos-download-tracker.vibelock.workers.dev/openapi.json",
  "runtime_openapi": "https://aziel-runtime.vibelock.workers.dev/openapi.json",
  "in_runtime": false,
  "ops": [
    {
      "op": "health",
      "method": "GET",
      "summary": "Liveness. Does not increment download KV."
    },
    {
      "op": "status",
      "method": "POST",
      "summary": "Read-only status / principles. No remote exec."
    },
    {
      "op": "invite",
      "method": "GET",
      "summary": "Print invite / principles markdown. Not a remote shell."
    },
    {
      "op": "principles",
      "method": "GET",
      "summary": "Read AZ-OS principles. exec/shell stay refuse."
    },
    {
      "op": "doctor",
      "method": "GET",
      "summary": "UI alias of health. Same FragGate backend as the Worker UI button."
    },
    {
      "op": "session_open",
      "method": "POST",
      "summary": "Open an isolate-native prefab ethics session VFS. Not a host shell."
    },
    {
      "op": "session_status",
      "method": "POST",
      "summary": "Preview the ethics VFS listing. Not host exec."
    },
    {
      "op": "session_close",
      "method": "POST",
      "summary": "Seal the ethics session. exec/shell stay refuse."
    },
    {
      "op": "session",
      "method": "POST",
      "summary": "Alias of session_open. Isolate ethics VFS, not a remote shell."
    },
    {
      "op": "close",
      "method": "POST",
      "summary": "Alias of session_close. Seals the ethics session."
    },
    {
      "op": "mode_list",
      "method": "POST",
      "summary": "Server, Bootstrap OS, and Full install. Not an OS yet without a kernel or userspace the machine can boot."
    },
    {
      "op": "boot_path",
      "method": "POST",
      "summary": "Kernel base from the AZOS principles, plus any packaged boot image. Not booted, so this is not an OS yet. A browser tab is not the OS."
    },
    {
      "op": "internet_base",
      "method": "POST",
      "summary": "Internet base on LAN, then Wi-Fi, then Bluetooth, then RF, then photon. Not live until a real packet on one of those carriers. Cellular is optional and refuses when no radio is present. The public door stays FG-STUB."
    },
    {
      "op": "guardian",
      "method": "POST",
      "summary": "Digital Guardian stays on. It audits this operator's own requests on this machine and seals a lattice receipt. It cannot be turned off. It does not watch other people."
    },
    {
      "op": "download_list",
      "method": "POST",
      "summary": "File list for one mode. Without a boot image the download stays incomplete. The phone web app is not the OS."
    },
    {
      "op": "download_check",
      "method": "POST",
      "summary": "Complete only when a real kernel or userspace hash matches. A note is not an OS. A missing image stays not complete."
    },
    {
      "op": "phone_path",
      "method": "POST",
      "summary": "Phone web app or bootstrap wrap. Neither is the OS. Flash stays unexecuted without a tested image. SIM is not wiped."
    },
    {
      "op": "sim_lockout",
      "method": "POST",
      "summary": "SIM lockout is off by default. It never erases a SIM or eSIM."
    },
    {
      "op": "cellular",
      "method": "POST",
      "summary": "Cellular is a packet carrier. Absent when no radio is present. No mock live."
    },
    {
      "op": "ip_mask",
      "method": "POST",
      "summary": "IP masking across AZOS modes. Not masked when no checked mask path exists."
    },
    {
      "op": "azcall",
      "method": "POST",
      "summary": "A changeable number with no fee is designed only. No call path."
    },
    {
      "op": "veillock",
      "method": "POST",
      "summary": "Camera and screen share stay off unless the person turns them on for a task they asked for."
    },
    {
      "op": "malware_sweep",
      "method": "POST",
      "summary": "Scan with the AZMail scanner. Live only when ClamAV is present. Never a mock clean."
    },
    {
      "op": "airgap",
      "method": "POST",
      "summary": "Airgap before use. Same scanner honesty as AZMail."
    },
    {
      "op": "human_check",
      "method": "POST",
      "summary": "Stop at a human check. No solver."
    },
    {
      "op": "skill",
      "method": "GET",
      "summary": "Return AZ-OS skill markdown. Does not increment download KV."
    }
  ],
  "banner": "AZ-OS does not grant remote shell. Invite prints principles; exec requires a local token.",
  "limitations": "AZ-OS does not grant remote shell. Invite prints principles; exec requires a local token.",
  "aliases": {
    "catalog_card": "https://aziel-runtime.vibelock.workers.dev/p/azos",
    "catalog_skill": "https://aziel-runtime.vibelock.workers.dev/p/azos/skill",
    "catalog_health": "https://aziel-runtime.vibelock.workers.dev/p/azos/health",
    "invoke_prefix": "https://aziel-runtime.vibelock.workers.dev/p/azos",
    "update_check": "https://aziel-runtime.vibelock.workers.dev/v1/update/check?slug=azos&version=0.3.0",
    "software": "https://aziel-runtime.vibelock.workers.dev/v1/software",
    "worker_home": "https://azos-download-tracker.vibelock.workers.dev/",
    "slugs": [
      "azos"
    ]
  },
  "doi": "10.5281/zenodo.21431711",
  "doi_note": "Historical DOI only. Do not invent a replacement. See /cite.json.",
  "skill_source": "https://azos-download-tracker.vibelock.workers.dev/v1/skill (service binding)",
  "kv_increment": false
}