Nothing happens without a reason, a record, and a way back.
Within two years, most machines will run software that acts on its own. It reads, writes, installs, connects and spends. The question every operator will ask is the oldest one in computing, put to a new actor. What did it do, who allowed it, and can I take it back. Zethro is built so the answer is ordinary.
- Nothing happens without a reason.Every package, file, service and rule on the machine cites the requirement that put it there.
zethro whyanswers for any line. A system you cannot explain, you cannot defend. - Nothing happens without a record.Every action an agent takes across its boundary is an entry in a hash-chained ledger, sealed and signed. Not a log you trust; a record you can verify and replay.
- Nothing is handed down wider than it was held.Authority flows from the owner to a cell to its children as capabilities, and each step can only narrow. Delegation that widens is the root of every runaway; it is refused by construction and written down when attempted.
- Nothing is final before a human has seen the diff.An agent's writes land in its own layer. They reach the real tree through a merge of a hash you read and approved, under paths it was allowed to write. Review is not a policy; it is the only path.
- Everything can be taken back.Updates undo. Cells roll back and fork. The whole machine is a sequence of states with a reason for each transition. A system that cannot be reversed cannot be trusted with autonomy.
What we did not do
We did not build a new wheel. Debian is the wheel, thirty years of packaging, a kernel that already knows how to say no, a community that has handled every edge case. We changed the contact with the road, how the system is assembled, how it explains itself, how authority is handed out and how actions are recorded. Zethro OS is Debian with the reasons attached. Zethro Core is the supervisor Debian never needed until now.
We did not build a model, an agent or an assistant. Any of them runs on Zethro; none of them is Zethro. The supervisor is deterministic, never learns, and is the same for every model it hosts. That is what makes its record worth anything.
How it is made
The specification before the code. The test before the implementation. The evidence after. A second reviewer with no context for every security change. No line without a rule. No rule without a reason. The method is the product.