We are thrilled to announce the first public preview of AKIOS v0.1.0. This release focuses on core stability and the fundamental sandboxing primitives.

Highlights

  • Core Runtime: Stable release of the akios-runtime binary for macOS and Linux.
  • Policy Engine: Flexible YAML-based policy definitions for network and file access.
  • CLI Tools: New akios CLI for managing agent lifecycles.

Architecture at a glance

AKIOS splits control and data planes so policies stay signed and enforced before any effect. The control plane holds the policy repo and engine; the data plane chains sandbox → PII guard → budget/loop kills → audit. Agents then reach tools/APIs only through those gates.

Clients/CI/Apps flow into AKIOS control plane and data plane, then to destinations under policy

Flow

  • Clients / CI / Apps → Control Plane: Policies are validated and signed.
  • Control Plane → Data Plane: Runtime orchestrator sets sandbox constraints.
  • Sandbox stack: seccomp/userns/cgroups → PII redaction → budget/loop guards → Merkle audit.
  • Agents → Tools/APIs: Only allowed calls pass; everything is logged and attestable.

Installation

You can install the latest version via Homebrew or by downloading the binary directly. 

brew tap akios-ai/tap
brew install akios

# Verify installation
akios --version

Changelog

Added

  • Initial support for WASM-based agents.
  • Added --strict mode for paranoid security defaults.
  • Documentation site launch (you're looking at it!).

Fixed

  • Fixed a race condition in the logger that caused dropped logs under high load.
  • Corrected file permission handling for read-only mounts.

Contributors

A huge thank you to everyone who contributed to this release. We couldn't have done it without the community support.