BACK_TO_CASE_STUDIES
// FRAMEWORK_CASE_STUDY / ALCYONEUS_OS

The operating systemfor agentic systems.

Alcyoneus OS is a production-grade Python framework for turning LLM calls, tools, memory, policies, and multi-agent collaboration into explicit, persistent, observable state-graph workflows.

100+
PRODUCTION CAPABILITIES
17
HARDENING PHASES
15
STREAM EVENT CLASSES
3
AGENT PROTOCOLS
5
SANDBOX TARGETS
3.12+
PYTHON RUNTIME
// THE_PROBLEM

Agent demos do not become reliable systems by adding more prompts.

Production agent software needs explicit state, controlled transitions, durable recovery, tool permissions, tenant boundaries, provider fallbacks, live execution signals, and tests that verify behavior instead of only checking final prose. Alcyoneus OS treats those concerns as one runtime rather than a pile of application-level conventions.

// THE_THESIS

Make the workflow visible, resumable, and governable.

A graph is the contract: state moves through named nodes and edges; tools sit behind policies; memory is selected by a storage boundary; events explain what is happening; and the same compiled workflow can be invoked, streamed, evaluated, replayed, and deployed.

// END_TO_END_RUNTIME

From Python definition to production trace.

The complete Alcyoneus path is deliberately composable: every layer can be adopted independently, but the pieces share state, policy, and observability contracts.

/01

MODEL THE STATE

Define a typed AgentState or domain state that carries messages, context, tool results, metadata, and durable run information through the workflow.

/02

COMPOSE THE GRAPH

Build a StateGraph from Python nodes, edges, conditional routes, subgraphs, handoffs, and Command-based dynamic navigation.

/03

ATTACH INTELLIGENCE

Connect provider-agnostic Agents, prebuilt ReAct/RAG/swarm/supervisor patterns, structured output, skills, memory, and tools.

/04

COMPILE WITH CONTROLS

Compile with checkpointers, vector stores, media, callbacks, interrupts, recursion limits, timeouts, guardrails, and policy boundaries.

/05

RUN OR STREAM

Invoke synchronously, run asynchronously, or stream graph, node, tool, handoff, interrupt, and error events through the same runtime.

/06

OPERATE AND PROVE

Persist state, publish telemetry, enforce tenant policy, inspect traces, replay runs, evaluate trajectories, and ship through Docker or Kubernetes.

// CAPABILITY_SURFACE

The system beneath the agent.

// GRAPH_ORCHESTRATION

A programmable execution model

StateGraph, MessageGraph, nodes, edges, conditional routing, catch-all selectors, subgraphs, compiled graphs, remote graph serving, and inline Command routing make the workflow explicit and inspectable.

// AGENT_SURFACES

Prebuilt patterns for real work

ReactAgent, RAGAgent, SwarmAgent, SupervisorTeamAgent, PlanActReflectAgent, RouterAgent, StructuredOutputAgent, AudioAgent, handoffs, and dynamic prompts reduce application code without hiding control flow.

// MODEL_ADAPTERS

Provider choice without graph rewrites

OpenAI and Responses, Google Gemini and Vertex AI, Anthropic, LiteLLM, and AnyLLM adapters share a normalized runtime. Retry policies and fallback models keep provider failures inside the control plane.

// TOOL_PLANE

Tools with bounded capability

Search, browser automation, policy-guarded shell, sandboxed code, files, semantic file search, image generation, calendars, schedulers, subagents, memory, computer use, and custom tool registries are first-class runtime citizens.

// MEMORY_AND_STATE

From working context to durable memory

Typed working state flows into in-memory, SQLite, PostgreSQL plus Redis, MongoDB, SQLAlchemy, Dapr, or encrypted session backends. Qdrant and Mem0 provide long-term retrieval, namespace isolation, TTL, and top-k controls.

// REALTIME_MEDIA

Text, audio, image, and live interaction

Streaming events, SSE heartbeats, response granularity, Gemini Live, OpenAI Realtime, Azure Realtime, local Whisper plus TTS, barge-in, WebRTC frame broadcast, media storage, and resolver policies cover interactive products.

// SAFETY_AND_GOVERNANCE

Capabilities are useful only when the boundary is explicit.

Alcyoneus separates what a model can suggest from what the runtime is allowed to execute. Guardrails, policy decisions, identity, secrets, and tenant scope are part of the execution path—not documentation left for the application team to reconstruct.

POLICY::EXPLICIT / AUDITABLE / COMPOSABLE
INPUT_BOUNDARY

PII detection, prompt-injection prevention, length limits, custom validators, and input tripwires run before the graph accepts work.

OUTPUT_BOUNDARY

JSON schema enforcement, blocked words, output limits, and output tripwires keep generated results inside a declared contract.

TOOL_BOUNDARY

Tool input and output guardrails support allow, deny, ask-user, validation, and rate-limit decisions around every capability.

POLICY_ENGINE

A nine-priority policy engine combines allow, deny, ask-user, tenant scope, workspace-only rules, and confirmation for sensitive commands.

IDENTITY_AND_ACCESS

RBAC, tenant isolation, JWT/JWKS, mTLS, RFC 7662 token introspection, API keys, and OAuth-style protocol auth protect the runtime.

SECRET_BOUNDARY

Vault, AWS, GCP, and Azure Key Vault integrations can be composed into a fallback chain so credentials do not become graph state.

// INTEROPERABILITY

One runtime, several ways to connect.

PROTOCOLIMPLEMENTATIONWHY_IT_EXISTS
MCPStdio, SSE, and WebSocket transports with capability negotiation and a five-minute tool cache.Connect tools and external capability servers.
A2AHTTP task exchange with agent cards, artifacts, streaming, retries, pooling, TLS, and API-key/JWT/OAuth2 authentication.Delegate work between independent agents.
ACPHTTP or in-memory client/server communication with agent discovery, task delegation, token/JWT auth, and streaming messages.Standardize agent-to-agent conversations.
EVENT BUSGraph, node, tool, handoff, interrupt, error, heartbeat, and completion events through async streaming APIs.Drive live UIs, logs, and operational consumers.
// ISOLATED_EXECUTION

Run dangerous capabilities away from the core process.

Shell, code, browser, and computer-use capabilities can be placed behind the sandbox backend that matches the risk and deployment environment. Resource limits, mounts, PTYs, GPU access, and workspace scope stay explicit.

DOCKER

GPU passthrough, resource limits, mounts, PTY, and workspace-scoped execution.

KUBERNETES

Pod lifecycle, exec, quotas, GPU scheduling, and cluster-native isolation.

FIRECRACKER

Micro-VM execution for stronger process and resource boundaries.

LOCAL / CLOUD

Unix PTY locally plus optional E2B, Modal, Runloop, Daytona, Blaxel, Cloudflare, Vercel, and Azure-backed extensions.

COMPUTER_USE

X11, Wayland, headless, VNC, remote desktop, accessibility bridges, and action verification.

// OPERATE_AND_VALIDATE

The production loop is part of the framework.

// OBSERVABILITY

OpenTelemetry decorators for graphs, nodes, LLM calls, tools, guardrails, handoffs, tasks, and custom spans; Prometheus metrics for requests, latency, tokens, errors, and sessions; structured JSON logs with W3C trace propagation.

// DEVELOPER_OPERATIONS

The alc CLI creates, runs, validates, visualizes, debugs, replays, traces, lists, and tests graphs and tools, with Mermaid, Graphviz, and interactive HTML output for architecture review.

// QUALITY_GATES

QuickTest, TestAgent, MockLLM, MockToolRegistry, MockMCPClient, TestContext, AgentEvaluator, factual accuracy, hallucination, safety, trajectory, rubric, and simulator-based evaluation make behavior measurable.

// 17_PHASE_PRODUCTION_HARDENING

From framework to operating surface.

STATUS::RELEASED / V1.1.0
01Sandbox hardening
02Computer use
03Policy-guarded shell
04Multi-provider web search
05Image generation
06Semantic file search
07Realtime audio
08Distributed CRDT sync
09MCP transports
10A2A / ACP
11OpenTelemetry and metrics
12Multi-tenancy and quotas
13AuthN / AuthZ
14Docker, Helm, Kubernetes, systemd
15Secrets management
16Redis rate limiting
17Audit, GDPR, lineage, OPA, SBOM
// IMPLEMENTATION_STACK
Python 3.12 / 3.13Pydantic 2OpenAIGemini / VertexAnthropicLiteLLMPostgreSQLRedisSQLiteQdrantMem0DockerKubernetesOpenTelemetry