• Book Digitization
  • Aetherius Ai Assistant
  • Ai Powered RPG Engine
  • Private Web-Based OS
  • Off-Grid Hub

Project currently on hold while I am dealing with medical issues.
I will most likely convert this project into a local home assistant ran on a single board computer like the Orange Pi 5.

Dialogue System: Done

Battle System: Done

Linking Script activation to skill usage in modular system: In Progress

🔐 True End-to-End Encryption (E2EE) & Integrity

Every API call and WebSocket message can be encrypted using a session-specific key established via an ECDH key exchange. The server is authenticated using ECDSA signatures to prevent Man-in-the-Middle (MitM) attacks, and session keys are periodically ratcheted for post-compromise security. Subresource Integrity (SRI) hash verification ensures that the frontend code matches expected build hashes before establishing communication.

🗄️ Zero-Knowledge Encrypted VFS & MFA

A client-side encryption layer secures your files. A session master key is derived from your password using a custom, dependency-free JavaScript implementation of Argon2id utilizing 64-bit BigInt operations (replacing old PBKDF2 schemes). Files are encrypted in your browser before they are sent to the server. Key retrieval and unlock sessions are optionally guarded by Multi-Factor Authentication (MFA/TOTP).

🛡️ Multi-Layer Sandboxing

  • Frontend Web Worker Isolation: Applications run inside dedicated Web Worker threads, completely isolated from the DOM and global window object.
  • Canvas Compositor: UI is driven via a canvas-native widget library, which serializes drawing instructions to a Canvas Compositor thread that renders widgets and forwards user inputs back to the worker.
  • Rust WASM Microkernel: Offloads path-traversal checking, memory boundaries, and VFS capability checking to a client-side WebAssembly binary compiled from Rust.
  • WebAssembly Bytecode Instrumentation: User WASM binaries are rewritten at load-time to inject env.checkpoint hooks at block entries and loop backedges, allowing cooperative yielding and execution-limit enforcement via WasiBridge.
  • Backend Isolation: Custom Python services are packaged, built into individual Docker container images (user-app-<app_key>:latest), and executed in ephemeral, network-isolated environments with strict resource constraints.

🧩 Extensible App Platform

Install custom apps bundled as .zip archives containing manifests, workers, and Python backend scripts. App capabilities, resource permissions (e.g. VFS scope, authorized syscalls), and custom Python endpoints are defined declaratively in manifest.json.

🧠 Built-in AI & RAG Engine

Web-OS features native server-side AI integration, orchestrating a Qdrant vector database, sentence-transformers, and BM25 rank scoring for Retrieval-Augmented Generation (RAG). Applications can make LLM_GENERATE system calls to interface with local (Koboldcpp) or external (OpenAI, Anthropic) models.


A self-contained edge-computing field server

Off-Grid Amenities
Local Intranet: A “Captive Portal” style dashboard that greets users when they connect.
LAN Chat: A WhatsApp-like chat server that works without internet (great for communicating between tents/vehicles).
Media & File Server: Local NAS for hosting movies, maps, and sharing files between devices.

🛡️ Security & Surveillance
AI Object Detection: Uses the NPU (Neural Processing Unit) to detect humans or animals in real-time.
Local NVR: Ingests RTMP feeds from Wi-Fi cameras (GoPro, Phones, IP Cams).
Threat Dashboard: A web-based UI accessible to anyone on the Wi-Fi to see live feeds and security alerts.

🛠️ Current Hardware Stack
SBC: Orange Pi 5 (RK3588)
OS: Ubuntu 22.04 (Joshua-Riek Rockchip build).
Network: USB-to-Ethernet Bridge + TP-Link TL-WR902AC (AP Mode).