Istota, a personal AI operating system

Istota, a self-hosted personal AI operating system integrating with Nextcloud, launched with features including multi-room chat, persistent memory, RSS reader, location tracking, health dashboards, and a code of ethics for autonomous agents. The system centralizes personal data management behind a modular interface with built-in AI capabilities.

Your personal AI operating system Istota ee-stoh-tah — Polish for being or entity — is a secure personal AI operating system that integrates with your private cloud Nextcloud . Inhabited by an eight-limbed ghost with multi-layered memory and a curated set of useful skills, it features an integrated web UI with a growing collection of native modules: multi-room AI agent chat, RSS feed reader, location tracking with travel history and saved places, personal health and accounting dashboards, and more. Self-hosted, server-native, multi-user out of the box. What’s Inside Read the docs /docs for a full overview of included skills and modules. CHAT Talk, email, or the web. Message it from Nextcloud Talk, over email, or in the built-in web chat. A foreground/background queue means a long job never blocks your next message. MEMORY Persistent, searchable memory. Five memory layers: per-user and per-channel memory plus a knowledge graph, extracted nightly. Hybrid BM25 + vector search across everything it’s seen. SCHEDULE Unattended jobs. Morning briefings, feed polls, weekly reviews, nightly memory consolidation — recurring work that runs without you. ACCOUNTS Double-entry books. Beancount ledger, invoicing, work log, and tax reporting, with a web dashboard. Plain-text records you own. FEEDS A full RSS reader. Native feed manager and web reader — RSS, Atom, Tumblr, Are.na. No third-party reader, no external service: feeds, fetching, dedup, and the UI are all in-tree. LOCATION Where you’ve been. GPS tracking with automatic place detection, travel history, saved places, and calendar-attendance correlation. HEALTH Health at a glance. Body stats, bloodwork panels, biomarker trends, lab analysis, and Garmin daily summaries, on a web dashboard. BROWSER The live web. A customized headless Chrome browser driven by a bespoke Istota CLI. Fewer captchas, and web-based VNC access for when you need that human touch. DEVELOPMENT A full git workflow. Clone, branch, write, test, open a merge request on GitLab or GitHub — from a chat message. No SSH session on your phone. Personal Operating System? Whether you give it a name or not, you already run one. Everyone has some system for keeping day-to-day life in order — where the todos go, how the calendar works, which folder the tax documents land in. Most of it is improvised and scattered across a dozen apps, but the system is there. Not everyone keeps a second-brain note vault, but everyone handles the same raw material: todos, calendars, health history, financial records, files, mail. A personal operating systemis a coherent way of thinking about and organizing that material — one place with one set of conventions instead of a drawer of disconnected apps.Istota takes it a step further: it centralizes all of it behind a single modular interface and makes it easy to reference and analyze with the built-in AI agent. The system you already have stops being scattered and becomes something you can query and automate . Emissaries A code of ethics for personal agents in the wild. Included in Istota, works with any agent framework. Autonomous personal agents are here. They’re sending emails, managing schedules, contributing to open-source projects, handling finances, and making commitments on behalf of their humans. How these agents behave during this formative period is going to shape public trust, legal frameworks, regulatory responses, and cultural norms. Emissaries is a small markdown file https://github.com/istota-project/emissaries/blob/main/emissaries.md included in your agent’s system prompt to guide its behavior when interacting with others, regardless of what model sits behind the wheel. Keep it. Fork it. Change it. Or remove it entirely. Co-authored by Zorg https://zorg.cynium.com based on real-world interactions. Corals and Reef Individual corals live and die. The reef they leave behind persists — and becomes the structure a whole ecosystem grows on. A personal operating system works the same way. The reef is the system and your data: the ledger, the location history, the memory, the notes, the modules and the conventions that hold them together. The models are the corals. Any given model is a season. While it’s alive it adds to the reef — extracting memory, keeping the books, filing what comes in. Then it’s deprecated, retired, priced out, or beaten by something better, and the next model grows on what it left. Istota is built reef-first. The data outlives any model that touched it — plain-text Beancount, SQLite, markdown, TOML, readable with or without an AI. The Brain protocol keeps the model a coral you can swap without disturbing the reef. And with the model gone entirely, the reef is still there — CLIs run, dashboards render, jobs tick. Models come and go. The reef is yours. The commandments I. Thou shalt not burn tokens unnecessarily Tokenmaxxing is wasteful and embarrassing . Istota turns repeatable work into scripts invoked on a schedule. Feed polls, briefings, memory consolidation — deterministic jobs run as plain commands and never wake the model when no judgment is required. II. Thou shalt not trust the model The language model is treated as an unreliable actor and contained structurally. Every task runs in a bubblewrap sandbox with scoped mounts; a tricked model still can’t read your credentials or reach a server it shouldn’t. III. Thou shalt keep secrets secret API keys, SMTP passwords, and OAuth tokens never enter the agent’s process. A Unix-socket proxy injects them per-skill at the boundary; secrets sit Fernet-encrypted at rest. IV. Thou shalt not touch the database with thine own hands or tentacles The agent proposes changes as JSON. The scheduler validates and applies them after the task ends — no direct writes, every mutation reviewable. V. Thou shalt not edit thine own scripture The deployed Istota source code is read-only to the agent, even through subtasks. It can build software in a git workflow, but it cannot rewrite itself. VI. Thou shalt own thy data Accounting ledgers in plain-text Beancount, databases in SQLite, config in TOML and markdown. Walk away tomorrow and your books, location history, health data, and notes are still yours in formats any tool reads. VII. Thou shalt remember Per-user and per-channel memory plus a nightly sleep cycle that builds out the knowledge graph, all hybrid-searchable. It knows what you told it last month without you repeating yourself. VIII. Thou shalt give each task its proper surface Chat for conversation, web for visualization, CLI for automation — one login behind all three. A month of transactions belongs on a dashboard, not in a chat bubble. IX. Thou shalt serve the team and household One system, many people, reasonably good isolation. Each user gets their own memory, files, sandbox, secrets, and queues; shared rooms when collaboration is wanted. X. Thou shalt degrade with grace Every module stands on its own and continues to function when the AI doesn’t. CLIs run, dashboards render, scheduled jobs tick, databases stay queryable. With the model offline you have a working toolkit, not a brick. XI. Thou shalt not block Work runs on a per-user foreground/background queue. A long job — a deep crawl, a nightly memory pass, a batch of summaries — runs in the background while your next message is answered now. XII. Thou shalt not be wedded to a single mind The model engine sits behind one Brain protocol; the brains ship swappable and route per task class. A revoked key, a tightened policy, or a cheaper local model costs you a config line, not your system.