Explain any chapter
Every page and chapter opens in Claude, ChatGPT, Gemini, Perplexity, Le Chat, or Grok with a prompt grounded in that page.
Isolated AI agents on NixOS
Reproducible infrastructure for Hermes and ZeroClaw, with explicit security boundaries and operational recovery paths.
These docs present a pinned release and source revision. Synchronized guides are checked against that commit; handwritten summaries are reviewed separately. Unreleased repository changes can be newer than this site.
Agent adapter status
Section titled “Agent adapter status”Hermes and ZeroClaw retain their existing integrations through mkAgent and compatible legacy builders. OpenClaw has a registered adapter, but remains a stopped scaffold: no OCI container is created, and an explicit start fails. It is not available as a running agent.
Read the adapter guide for supported arguments and the remaining model, Research, execution, and lifecycle acceptance requirements. Infrastructure checks do not establish actual vendor runtime acceptance.
Generic digest-pinned OCI definitions share the existing containment, but remain stopped pending capability admission; generic model and Research hooks are not accepted. Discover presets with tentaflake runtimes --json. The installed-host onboarding workflow creates templates, validates plans, and imports stopped additions without rebuilding, activating, or starting services.
Choose your path
Section titled “Choose your path”Start with a clean installBuild the installer, provision a dedicated host, and reach a verified first boot.
Add an existing NixOS hostConsume tentaflake as a flake input and declare a stopped capsule first.
Understand the boundaryReview trust assumptions, profiles, brokered egress, and disposable workers.
Operate and recoverUse the CLI, the observability profile, backups, and the recovery procedures.
Built for agents, too
Section titled “Built for agents, too”Plain Markdown everywhere
Read /llms.txt, fetch /llms-full.txt, or swap any trailing slash for .md.
Use with AI agentsPrompts, Markdown formats, and the installable tentaflake skill for coding agents.
Read by topic
Section titled “Read by topic”- Configuration: agents, agent adapters, secrets, brokered egress, web research, disposable worker, and workspace quota.
- Operations: CLI and shell, agent management, recovery, Private management contract, and observability.
- Security: profiles, the threat model, and reporting.