# Building a Kernel-Integrated AI that Doesn't Hallucinate > Source: > Published: 2026-06-20 19:05:03+00:00 IONA OS is an operating system written from scratch in Rust. It has its own kernel, its own GUI, its own blockchain protocol, its own programming language (Flux), and — since recently — its own kernel-integrated AI. Not a chatbot. Not a cloud API wrapper. An AI that runs in Ring 0, reads CPU temperature directly, kills processes, synthesises drivers, and optimises the system in real time. The hardest part wasn't making it work. The hardest part was making it trustworthy. When an AI runs inside the kernel, a hallucination isn't just a wrong answer — it could crash the system, corrupt memory, or make a bad decision that leaves your laptop unusable. Here's how we built IONA AI to be reliable, self-correcting, and causally aware. 1 Detecting Hallucinations Before They Happen Most AI systems generate text and hope it's correct. IONA AI cross-checks facts. When the AI says "CPU is over 80°C", the system doesn't just accept it. It verifies the correlation with power draw in watts. We maintain a watts anchor and check consistency. If CPU temperature is high but power draw is low, the system knows something is wrong. It logs the anomaly and overrides the response. This cross-fact consistency prevents the AI from confidently stating false information. We built a causal chain module that records every event with a parent pointer. When the AI observes a problem, it traverses the chain backwards and builds a narrative: temperature rose because governor was set to Performance when you compiled the kernel, which spawned eight threads that consumed ninety-five percent CPU for four minutes. This is more than logging. It is causal reasoning. We added explicit cycle detection in the causal chain explain function. If a cycle is found, the AI reports it clearly: "Causal cycle detected: thermal_throttle → governor_change → cpu_load → thermal_throttle." This prevents the AI from getting stuck in self-referential reasoning and forces it to break the loop by suggesting an external action. A fact like "CPU governor is Performance" with confidence 0.98 decays at a slower rate, while "User likes dark theme" with confidence 0.60 decays faster. This keeps the system from forgetting what it really knows while allowing uncertain information to fade. If CPU usage is high, reasoning depth is reduced to one. If the system is idle, reasoning depth goes back to three. This ensures the AI doesn't make the system worse when it is already struggling. Policy A saved twelve watts and is ranked first. Policy B saved four watts and is ranked second. Policy C saved one watt and is ranked third. At tick two hundred, the system re-ranks policies by watts saved per applications affected. It learns from its own actions. This allows the system to learn from past deliberations and improve future decisions. Topics Beyond Chat We extended the dialog topic detector from five to eight topics, adding network, storage, and AI. The AI now maintains separate conversation contexts for each, so it doesn't confuse a discussion about storage with one about security. Goal Tracker with Real Metrics The AI can track user-defined goals, but now it evaluates them using real system data. For example, a goal like "keep power under thirty-five watts" is evaluated against actual power draw. If current power is twenty-eight watts, progress is shown as fifty percent. Custom goals are no longer empty promises. They are actual dashboards. If the system detects compilation, it switches the governor to Performance. If it detects idle, it switches to Powersave. No user interaction is required. The system just knows. Building an AI that runs inside the kernel is hard. Building one that can be trusted — that doesn't hallucinate, doesn't spiral into circular reasoning, and doesn't crash the system — is even harder. IONA AI is still evolving. But with these ten additions, it is no longer just a chatbot. It is a self-correcting, causally aware, energy-optimising agent that lives inside the operating system itself. All sixty-three thousand lines of it, in Rust, running in Ring 0. The code is not yet fully public, but you can see the architecture on GitHub. IONA OS launches on September 15, 2026. The website is iona.zone.