System changes and approval
Source review, approval, builds, and deployment across VM boundaries.
usr-assistant can host an AI agent that prepares configuration changes and
submits them to sys-ctrl. You review and approve the source changes and requested
deployment scope in Airlock Control, a GUI running in sys-ctrl. Approval
allows the update to be built; dom0 checks that deployment stays within the
approved source and scope before activating it.
After approval, sys-ctrl evaluates and builds the configuration. The agent then
requests deployment through sys-ctrl under that same approval.
Development note
Airlock OS is a work in progress. Current development images permit a privileged
dom0 shell from usr-assistant, outside this approval workflow. That access
means the separate VM does not fully constrain an agent's authority.
For more information, see Using Airlock OS.