StacyVM v1.0 — production · public release

The friendly operating system for AI.

Stacy installs on each person's machine. Each install is a complete operating system for AI — execution, intent, memory, sovereignty. Installs federate into the collective brain of a team.

Personal-first Federated Sovereign Open source
$npx stacyvm-setup@latest
Get a running Stacy install in under a minute. One command.
StacyVM Production · public v0.14 · phase 14
The trusted execution layer of Stacy. Available today.

StacyVM is the production-ready execution layer of Stacy — self-hosted sandbox infrastructure for AI-generated software. Every AI agent needs a safe computer. StacyVM gives it one.

Run generated code, agents, workflows, and previews in isolated disposable environments with verifiable worker identity. Multi-provider runtime — Firecracker for production, Docker for local, gVisor and PRoot for restricted hosts — same API across all of them.

Open source. Self-hostable. Python and TypeScript SDKs. Live preview URLs. Phase 14 worker identity hardening shipped. Available today via a single npm install.

01
Isolated sandboxes
Firecracker microVMs, Docker, gVisor, PRoot — same API, swap providers without rewrites.
02
Live previews
Spin up a generated app and get a public preview URL in seconds. Click, see, approve.
03
Worker identity
Phase 14 hardening — every execution attestable to a verified worker. No bearer-token guessing.
04
Pool mode economics
Many isolated workspaces share VM capacity you own. Cost bounded by the box, not the workload.
the architecture

Personal-first. Federated.
Sovereign.

Hover or tap any component to see its current status, what it does, and where to find its code and docs.

Tier 01 A single Stacy install on one person's machine.
// stacy · install · single person v0.14 · phase 14
A Arpanperson identity
Stacy CLI
terminal cockpit
Control Panel
visual cockpit
Agent / API
programmatic
Intent Compiler // intent → runnable plan
StacyVM
trusted execution · phase 14
01
Deterministic execution
02
Agent runtime
03
Live preview
04
Worker identity
05
Provenance
06
Provider abstraction
Stacy Sync
coordination kernel
shared schemas
provenance graph
permissions
compatibility
registry
receipts
Generated Software
object family · 01
App specs, modules, schemas, dependency graphs, deployment records — everything the agents build.
Stacy Brain
object family · 02
Knowledge Objects — conversations, decisions, ingested context — your personal mini-brain on this machine.
Sovereignty Layer · wraps everything above
identity RBAC consent audit retention revocation
Tier 02 Mini-brains federate into a collective brain.
// stacy · federation · company of ten tier 02 · brain mesh

Ten installs become ten mini-brains. Each person owns theirs. They federate through Stacy Sync — opt-in, granular, retroactively revocable — into the collective brain of the company.

+ 6 more
A
mini-brain
Arpan
M
mini-brain
Meera
R
mini-brain
Rohan
S
mini-brain
Sana
Collective Brain
tenant · stacy / acme
01 / OPT-IN
You choose what federates.
Default scope is personal. Federation requires explicit consent — per object, per connector, per rule.
02 / PROVENANCE
Every fact traces home.
Each Knowledge Object is signed by the worker that produced it. The collective never loses origin.
03 / REVOCABLE
Changed your mind?
Revocation propagates end-to-end. Consumers see it on next read. Receipts log the change.
Tier 03 What Stacy produces.
Deploy Anywhere · Memory Everywhere
Web Apps
on-chain / off-chain
Mobile Apps
native / hybrid
AI Agents
workflows / hybrid
Collective Brain
memory + reasoning
// every output · attested · audited · sovereign stacy — live
build status

What ships today. What's next.

Stacy unfolds one layer at a time. StacyVM is production and public. Stacy CLI is in active development. Stacy Sync is research with three published papers.

StacyVM

// trusted execution layer
Production · public release

The execution layer of Stacy. Self-hosted sandbox infrastructure for AI-generated software — multi-provider runtime (Firecracker, Docker, gVisor, PRoot), live preview URLs, verifiable worker identity, Python and TypeScript SDKs. Production-ready and public.

Stacy CLI

// intent layer entry point
In active development

Local-first command-line cockpit. Zero to a running Stacy instance in under 3 minutes. Connect your own Codex or Claude, create agents, assign tasks, watch live logs and cost, approve risky actions, recover state. Local credentials, no shared accounts.

Stacy Sync

// coordination kernel
Research stage · 3 papers

The kernel that coordinates every object Stacy touches — generated software and Knowledge Objects (Stacy Brain). Three published research papers cover the operating system framing, the synchrony layer protocol, and public synchrony for Web3 interoperability and agent guardrails.

research

Three papers behind the architecture.

Stacy sits on top of published research. The operating system framing, the synchrony layer protocol, and the public synchrony infrastructure each have their own paper.

// pick your language

Drop in, in two lines. Python or TypeScript.

One client. Same calls both sides. Self-hosted compute sandboxes for AI agents — spawn, exec, destroy.

$pip install stacyvm
from stacyvm import Client

client = Client("http://localhost:7423")

sandbox = client.spawn(image="python:3.12")
result = sandbox.exec("python3 -c 'print(40 + 2)'")
print(result.stdout)        # "42\n"

sandbox.destroy()
$npm install stacyvm
import { Client } from "stacyvm";

const client = new Client("http://localhost:7423");

const sandbox = await client.spawn({ image: "node:20" });
const result = await sandbox.exec("node -e 'console.log(1+1)'");
console.log(result.stdout);   // "2\n"

await sandbox.destroy();

Built by a small team. Open to design partners. Reach us at stacydotide@gmail.com