Ecosystem

Intelligence,
contained.

Agents are useful when they can act. They are deployable when their actions are contained and their memory is governed.

The Intelligence

CosmicDuckOS

The agentic operating system: writes code, orchestrates workflows, fetches context, and talks to APIs. It is the user-facing intelligence layer.

Gateway
Zig Gateway
Models
Local + Cloud
cosmicduck.dev
The Shield

Metatron Security

The containment layer for AI agent actions. It blocks unauthorized file reads, deletes, and renames; restricts outbound network access; and keeps agent process trees visible in real time.

Files
AUTH block
Network
Allowlist
metatronsecurity.com
The Enclave

Metatron Enclave

The memory and evidence layer. Enclave turns selected folders into an encrypted semantic index, filters search by clearance, and preserves hash-chained file history for regulated teams.

Memory
Encrypted .meb
Evidence
Hash-chain
metatronenclave.com
The Symbiosis

Why agents need memory and boundaries.

In ancient lore, Metatron is the scribe of God — the entity that draws the boundaries of the universe using sacred geometry. Metatron's Cube contains every shape that exists in creation, defining the limits of what is possible.

In our architecture, Metatron Security draws the operating boundary. Agent process trees can write code, run tools, and call approved services, but protected paths and unapproved network destinations stay outside reach.

Metatron Enclave handles the other half: private semantic memory, clearance-aware retrieval, and the evidence record regulated teams need when an action is challenged later.

Security controls what agents may do. Enclave controls what humans and agents may know. CosmicDuckOS works inside those boundaries.

Architecture Stack
L4 CosmicDuckOS User-space agent
L3 api.cosmicduck.dev Zig API gateway
L2 Metatron Enclave Semantic memory + ledger
L1 Metatron Security File + network enforcement
L0 Hardware Apple Silicon
Parent Company

Quantum Encoding Ltd

We build AI systems that work close to private context, so we also build the Mac-native controls that keep that context protected, searchable, and defensible.