An operating system
built from isolated cells.
Apps run as cells directly on an exokernel — no Linux syscall stack in the path, capability enforcement in the kernel itself. Faster and structurally safer for native workloads. And availability is design principle number one: updating an app never takes it down.
Three claims, three measurements.
under sustained fire —
zero downtime ~6×faster syscall than
Linux — measured on
real KVM, not projected 47+acceptance gates —
every feature proven
in QEMU before merge
Every number was measured, not projected — here is how. Where a feature is planned rather than built, the roadmap says so.
Try to break it.
The real cluster shape — cells around a kernel, each with its own page table. Isolation is enforced by the MMU, not by policy. Click a cell and watch the healer respawn it. Then kill gw-admin, the control plane. And if you want to see where the chain of watchers really ends, kill the supervisor first.
Click a cell to crash it. With the map focused: ←/→ select a cell, Enter crashes it.
Crash → drift detected → respawn from the signed image. In production the same machinery goes further: declare replicas: N and a rolling restart never lets the group hit zero. How it all fits together →