Retired as a separate repository on 2026-09-07. Continued in Opsle Tasks. Specifications, provenance, licenses and any prototype tests were preserved from
ad96fcfdfac06d340b5e96d369634980cee78ef4. See the migration manifest for implementation mapping and rollback. Historical material below describes the original experiment.
Experimental Opsle research. Claims are hypotheses until evidence supports them.
Autonomous execution risks host mounts, production secrets, lingering processes, excessive network access, and ambiguous destruction.
A narrow broker and disposable bounded workers can reduce blast radius while preserving exact result capture and destruction proof.
Application → restricted privileged broker → disposable worker → bounded resources/network/credentials → execute → seal result → terminate → destroy → verify destruction. Incus is one optional adapter.
The Opsle thesis asks: What if we stopped using intelligence for work that doesn’t require intelligence? This project isolates one candidate boundary so it can be falsified and measured independently.
Incus dependence, host-wide privilege for agents, production secrets in workers, or cleanup claims based only on process exit.
THEORY under the Opsle maturity model.
Disposable Incus workers, credential cleanup, broker separation, and destruction states were exercised in Taslos Tasks.
Portable isolation adapters, quantitative containment tests, kernel escape threat model, and destruction-proof interoperability.
Correctness gates every comparison. Planned measures:
- containment
- startup latency
- resource overhead
- orphan rate
- cleanup time
- destruction proof
- duplicate results
See BENCHMARK.md for experiment rules. No benchmark numbers are claimed.
This project is part of Opsle Research. Opsle Tasks is the future public name of the integrated reference system from which several ideas emerged. Its active development migration to the Opsle organization is intentionally deferred.
Future Opsle Tasks may consume this project through an adapter only after evidence supports integration. The active predecessor, Taslos Tasks, remains unchanged and has no dependency on this repository.
No installable production package is justified yet. The repository is theory/specification-first.
Portable isolation adapters, quantitative containment tests, kernel escape threat model, and destruction-proof interoperability.
Apache-2.0. See LICENSE.