# Tolun OS
An adaptive Linux operating system that places AI as a first-class system component rather than a mere application. A fully declarative, immutable NixOS Flake distribution with a natural-language intent translator, a custom Tolun-LLM core, and Rust daemons speaking over D-Bus. Contributor project.
Overview
Tolun OS is an adaptive Linux operating system born from the fusion of AI and Linux. It is a fully declarative, immutable NixOS Flake distribution that places AI as a first-class system component rather than a mere application. A translator layer takes user intent in natural language and safely routes it to the system; a custom Tolun-LLM core plus optional external LLM proxy and Rust daemons speaking over D-Bus form the architecture. V1 is a single-developer dogfooding phase with three personas (Life, Atelier, Child), multiarch x86_64 and aarch64, AI via candle and llama.cpp with no Python runtime dependency, built on KDE Plasma 6. Security includes AppArmor and bwrap sandboxing, sops-nix and agenix encrypted keys, a BLAKE3 audit chain, security witness collection, and intent-token MAC with monotonic attenuation. This is a contributor project — not solo work.
Problem
Desktop Linux treats AI as an application layer bolted on after the fact. System configuration, automation, and user intent still require deep technical knowledge, and there is no shared architecture for routing natural-language intent safely into OS-level operations.
Approach
A translator layer takes user intent in natural language and safely routes it to the system. A custom Tolun-LLM core plus optional external LLM proxy and Rust daemons speaking over D-Bus form the architecture. V1 is a single-developer dogfooding phase with three personas (Life, Atelier, Child), multiarch x86_64 and aarch64, AI via candle and llama.cpp with no Python runtime dependency, built on KDE Plasma 6. Security includes AppArmor and bwrap sandboxing, sops-nix and agenix encrypted keys, a BLAKE3 audit chain, security witness collection, and intent-token MAC with monotonic attenuation.
Impact
- * Declarative, immutable NixOS Flake base with multiarch x86_64 and aarch64 support.
- * AI runs via candle and llama.cpp with no Python runtime dependency — a first-class system component, not an app.
- * Security-first: AppArmor, bwrap sandboxing, encrypted keys, BLAKE3 audit chain, and intent-token mandatory access control with monotonic attenuation.
- * Three personas (Life, Atelier, Child) for single-developer dogfooding.