Documentation
Everything you need to run deputyOS.
Concepts, how-tos, operations, security, build and distribution — every flag, schema and internal, in one place.
Concepts
What deputyOS is, how it's built, and the rules that govern it (profile-class, air-gapped tier, plugin model).
How-to
Step-by-step recipes — add a channel, rotate keys, enable voice, mount drives, back up and restore.
Operations
Operational guidance: cost guardrails, monitoring & logs, updates and rollback.
Security
Default-on controls, secrets storage, the update trust chain, and how to report vulnerabilities.
Build
Build pipeline internals: make targets, image bake stages, air-gapped builds.
Distribution
How images ship: desktop launcher internals, hardware matrix.
Reference
The frozen surfaces: CLI, schemas, system layout, HTTP APIs.
- AppArmor profiles
- deputyctl
- deputyos-desktop
- deputyos-track
- deputypwa
- deputypwa HTTP API
- deputywizard
- deputywizard HTTP API
- Device limits (`limits.json`)
- Filesystem layout
- Hook payload schemas
- Message relay (Unix socket)
- Profile manifest (`profile.toml`)
- Provider catalogue (`providers.json`, `cost-defaults.json`, `voice.toml`)
- Release manifest (`manifest.json`)
- systemd units
Contributing
How to contribute, and the rules we hold ourselves to.