Jas — Security-First AI Agent Orchestration
Local-first, encrypted-at-rest. Your AI assistant that plans, executes, and asks before it acts.
Key Value Propositions
You Stay in Control
Every write, shell command, API call, and file change goes through an explicit approval engine. No silent escalation.
Local-First & Encrypted
Encrypted database and secrets. No cloud sync, no telemetry to third parties.
Multi-Model, Tiered Trust
Orchestrator (Claude) plans; trusted workers execute with scoped tools; sandboxed workers (Gemini, GPT) handle read-only subtasks. Right model for the right job.
Persistent Memory & Skills
Semantic memory with local embeddings. Procedural skills shape behavior without granting new capabilities.
Everywhere You Work
CLI, desktop GUI (GTK), and mobile app (Flutter). Same agent, same security model.
Feature Highlights
Approval Engine
AUTO / REVIEW / MANUAL per action type. Destructive actions always require explicit approval.
Workstreams
Bounded multi-phase projects and continuous scheduled runs with cumulative context.
Defense in Depth
Input sanitizer → approval engine → output validator. Three layers against prompt injection.
Namespace Isolation
Projects never cross namespaces. Memory, files, and sessions stay scoped.
Technology Stack
Backend
- Python 3.12+
- FastAPI
Client
- Flutter (mobile + desktop)