AI17ZAI17Z
Sign inRun AI17Z
MenuClose
Sign inSource on GitHub
Run AI17Z

Local · Persistent · Open

AI agents beyond the session.

AI17Z — 1 identity. 7 faculties. A–Z capability.

  • Knowledge
  • Memory
  • Perception
  • Relationships
  • Behavior
  • Tools
  • Action
Run AI17Z Explore the system
Scroll

1Identity

The session ends. The agent stays.

The model supplies reasoning, and can be replaced. AI17Z supplies the agent: a character, a memory it can account for, and a machine of its own, which is yours.

Runs on
Your hardwareAPI, worker and interface in Docker, with Postgres
Remembers
Six scopesEvery retrieval records the reason it was chosen
Acts
Once, on recordDry run by default; one event, one action

7Faculties

What one agent is made of.

Seven words for what an agent can do. Each stands for parts of the runtime you can open and inspect.

How the faculties map to the runtime

  1. Knowledge

    Curated reference material and a style corpus, kept apart from conversation. What a tool returns is evidence with its source attached: data, never instruction.

  2. Memory

    Six scopes with an explicit write policy and deterministic retrieval. Every recalled memory carries the reason it was chosen.

  3. Perception

    Everything that arrives becomes an immutable record and a job that survives restarts. For browser-backed channels it reads through a real Chrome that you sign in to yourself.

  4. Relationships

    Durable facts about a person, kept across every conversation and assembled into context beside the persona.

  5. Behavior

    Persona, voice and the rules it follows, as versioned configuration. What it may do is your decision, per agent and per capability.

  6. Tools

    Typed capabilities through one Toolspace, where rate limits, caching, provenance and size limits are applied once. Plugins add capabilities to it and stay off until you allow them.

  7. Action

    The target is verified before anything real is touched, and one event can never produce two remote actions. A dry run is the default.

The interface

Software you open, on a machine you own.

The first screen asks you to create an owner account that lives on your machine. From there you decide, per agent and per capability: off, ask me first, or allowed.

Open an agent’s Activity and every decision is there, including the decision not to answer, and why.

Memory · Knowledge · Relationships

It remembers, and can say why.

Six scopes, each queried separately under its own limit. Nothing is ranked by a hidden model, so every recalled memory carries the reason it was chosen.

  • THREADThe turns of one conversation
  • USERDurable facts about a person, across every conversation
  • PERSONAWhat the agent itself has said or committed to
  • ACCOUNTShared context for one connected account
  • KNOWLEDGECurated reference material and style corpus
  • EPISODICCompressed long-term summaries

A–ZCapability

Every capability takes one road.

An agent asks for a capability by name. It is typed, checked against your permission, kept inside the network boundary and written down. Plugins add capabilities to the same road and stay off until you allow them.

One capability callyour machineleaves it only here
  1. 01Agent askscontract.abiA capability by name — never a vendor, never a script.
  2. 02Permissionoff · ask me · allowedYour decision, per agent. Checked at ingest and again at execution.
  3. 03Toolspacetyped inputRate limits, cache and circuit breaker in one place, for every tool.
  4. 04Network boundarydeclared hostsNo private addresses, no plain http, size capped — whatever a tool declares.
  5. 05Typed resultprovenanceOutput is validated. Evidence is data, never instruction.
  6. 06Audit rowone per callWhat was asked, allowed and returned — inspectable later.

Built in

Six toolpacks ship with AI17Z. Each is off until you allow it for an agent.

An installed plugin declares one bounded operation and never ships code to run on your machine.

Build a plugin

  1. Reference & Knowledge

    Reference works, scholarly indexes and encyclopedias that cite their source.

  2. Web & Feeds

    What a page said in the past, and what a site has published to its feed.

  3. Crypto & Onchain

    Contracts, balances, prices, locked value and governance, by exact address and never by ticker. Reading only.

  4. X

    Accounts, posts, conversations and searches. Reading only.

  5. Projects

    What a repository you watch has released, merged and discussed.

  6. Company Filings

    What a public company has filed with its regulator.

Action

One event, recorded end to end.

Jobs survive restarts and resume from the last completed step. A dry run goes through all of it and stops before touching anything real.

  1. 01

    Event

    Everything that arrives becomes an immutable record and a job that survives restarts.

  2. 02

    Context

    Persona, relationships and the memories retrieved, each with the reason it was chosen.

  3. 03

    Model

    Every prompt layer and every model attempt is stored beside the answer.

  4. 04

    Verify

    The target is verified before anything real is touched.

  5. 05

    Act

    Idempotent by unique index: one event can never produce two remote actions.

  6. 06

    Remember

    What is worth keeping is written under an explicit policy, not by accident.

Local first

Your hardware. Your data. Your agents.

No account, no server and no subscription. Everything an agent is lives where you can reach it.

WhatWhere it lives
Agents, events, jobs, memories, relationshipsPostgres in a Docker volume on your machine
Model provider API keysThe same database, encrypted with your master key
Browser profiles and sessionsstorage/browser-profiles/ on your disk
The master key itselfYour .env, and nowhere else

The runtime is local. A remote model provider receives the context AI17Z sends it; that is how it answers. Use Ollama and nothing leaves your machine.

Studio, this site, is optional. Your installation calls out to it only if you link one; see what Studio stores.

Developers · Publishers

Build for it. Publish to it.

Submit an exact version, and a person reviews it before it reaches anyone.

Apply to publish Developer guide
  1. 01you

    Apply

    Tell us who you are and what you will build. A person verifies you before anything can be published.

    publisher application

  2. 02you

    Build

    Write a Plugin manifest, a hosted capability, or fork ShiftAboveCtrl/ai17z for an in-core integration.

    manifest · gateway · fork

  3. 03you

    Submit

    An exact version: manifest bytes or commit + pull request, permissions, disclosures, tests, compatibility and price.

    immutable once submitted

  4. 04Studio admin

    Review

    An admin reads the exact bytes, the hosts, the data handling and the tests, and classifies the risk.

    LOW · MEDIUM · HIGH

  5. 05Studio admin

    Publish

    Approved versions go live and never change. Fixes are new versions, reviewed again.

    free, one-time, monthly or yearly

Marketplace

Extend what agents can do.

Open the marketplace

0 listings · open for submissions

No verified plugins published yet.

The marketplace is open, and deliberately empty until the first reviewed versions are published. Nothing here is seeded or sponsored.

Submit your plugin Read the developer guide

Every listing will show

  1. A verified publisherA person checked who they are before they could list anything.
  2. The exact reviewed versionManifest bytes or commit, immutable once approved.
  3. What it can reachDeclared hosts, effect, risk and credential slots.
  4. Reviews from owners onlyOnly people who acquired it can rate it.

Start

Run AI17Z.

On Windows, paste this into Windows Terminal. macOS and Ubuntu are one short, readable script.

Windows · PowerShell
irm https://raw.githubusercontent.com/ShiftAboveCtrl/ai17z/main/install.ps1 | iex
All platforms What the installer does