Jas — Security-First AI Agent Orchestration

Local-first, encrypted-at-rest. Your AI assistant that plans, executes, and asks before it acts.

Key Value Propositions

You Stay in Control

Every write, shell command, API call, and file change goes through an explicit approval engine. No silent escalation.

Local-First & Encrypted

Encrypted database and secrets. No cloud sync, no telemetry to third parties.

Multi-Model, Tiered Trust

Orchestrator (Claude) plans; trusted workers execute with scoped tools; sandboxed workers (Gemini, GPT) handle read-only subtasks. Right model for the right job.

Persistent Memory & Skills

Semantic memory with local embeddings. Procedural skills shape behavior without granting new capabilities.

Everywhere You Work

CLI, desktop GUI (GTK), and mobile app (Flutter). Same agent, same security model.

Feature Highlights

Approval Engine

AUTO / REVIEW / MANUAL per action type. Destructive actions always require explicit approval.

Workstreams

Bounded multi-phase projects and continuous scheduled runs with cumulative context.

Defense in Depth

Input sanitizer → approval engine → output validator. Three layers against prompt injection.

Namespace Isolation

Projects never cross namespaces. Memory, files, and sessions stay scoped.

Technology Stack

Backend

  • Python 3.12+
  • FastAPI

Client

  • Flutter (mobile + desktop)
1097+tests passing across 11 phases
9security principles baked in