A secure, sandboxed, verifiable self-hosted agent operating system and TUI in a single Go binary.
987
A secure, self-improving agent operating system in a single Go binary. Bring your own model, point it at a goal, and grant it real authority, because every action is sandboxed, governed, and sealed into a verifiable, tamper-evident record.
Full documentation, source, and issues: https://github.com/ionalpha/flynn
docker run -v flynn-data:/data \
-e ANTHROPIC_API_KEY=your-key \
ionalpha/flynn:latest
Mount a volume at /data (SQLite store, credential vault, learned skills) so state survives container replacement. The control-plane API binds loopback inside the container by default; add a channel (for example -e TELEGRAM_BOT_TOKEN=...) to reach the agent. See the repository for remote access and hardening.
latest - the most recent releaseX.Y.Z - a specific release, e.g. 0.1.3 (pin this in production)Images are multi-architecture: linux/amd64 and linux/arm64.
Every image is signed with keyless cosign:
cosign verify ionalpha/flynn:latest \
--certificate-identity-regexp 'https://github.com/ionalpha/flynn/.*' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
Content type
Image
Digest
sha256:580e5451c…
Size
8.1 MB
Last updated
3 months ago
docker pull ionalpha/flynn