Sovereign · Secure · Smart

The AI-native OS that's actually yours.

The system's own files are sealed and read-only, so nothing on the computer can change them. Ora, the built-in assistant, cannot change anything without your say-so: she has to ask a separate guard, and the guard asks you. Her model runs on your own computer, so your chats go to no company unless you connect one.

Download Coming soon See what it does →

One file, orynr-live.iso, about 4 GB. Write it to a USB stick and start the computer from it to look around. Landing soon.

Why Orynr exists

You shouldn't have to choose between safe and usable.

Most “AI PCs” bolt a chatbot onto an old stack and send your life to somebody else's servers. Most hardened systems ask you to give up everything that makes a computer pleasant to use. We didn't want to accept either trade, so we built Orynr.

01

Yours

Ora's model runs on this computer. What you ask her goes to no company unless you connect one yourself, and no AI server address is built into Orynr. Every decision the guard makes, allowed or refused, is written down where you can read it.

02

Sealed

The system's own files cannot be written to, by you, by a program or by malware. Underneath sits a kernel we harden and compile ourselves, with SELinux always on, and a desktop that never runs as the computer's administrator.

03

Careful

The assistant does real work on the machine. She also cannot take a single privileged action until a separate guard asks you first, and she has no way to answer that question herself. That is how it is built, not a promise we are asking you to trust.

Have a look around

Four things worth knowing.

Each of these has a page of its own, written to be read rather than skimmed.

Ora

An assistant that has to ask

Ora reads files, runs checks, changes settings and works out what is wrong. She cannot do any of it by herself. Every change goes to a separate guard she cannot talk to, argue with or switch off, and the guard asks you. She runs against a model on your own hardware.

How we keep her on a leash →

The Orynr assistant, showing that it can work the machine but every action needs your approval

Security

Layers, and a way to check each one

Sealed system files checked as they are read, a kernel built from source, SELinux always enforcing, files judged by what is in them rather than what they are called, apps kept in their own boxes, and updates signed with post-quantum cryptography.

The security model, and its limits →

The Orynr Security Center

Technology

Built from source, not assembled from parts

Mainline Linux LTS with the hardened patch set and our own configuration, compiled with Clang's link-time optimisation and control-flow integrity. A sealed base with your files kept separate. A desktop written in Rust for this operating system.

How it is put together →

The Orynr desktop

Switching

Your Windows apps, and your work network

A compatibility layer for Windows applications with no virtual machine and no second licence. Each Windows program runs in a cage with no home folder and its own settings. Joining a Windows work network is built and is asked for on the sign-in screen, and we are clear about what will never work.

How it works, and what it will not run →

The Orynr file manager

What is in place

The parts we have already watched work.

Everything on this page carries a label. Ready means it is in Orynr today and we have watched it work on a test machine. Coming soon means it is written and being tested, and we will not call it more than that until we have seen it work. Nothing has yet run on a real computer rather than a test machine, and there has been no independent audit.

The system files are sealed Ready

The operating system's own files are read-only. A program, malware or a mistake trying to write to them simply fails. Every piece of the system is checked as it is read, so a disk edited on another computer should refuse to start.

SELinux is always enforcing Ready

Every program is held to what its policy allows, even one running as the computer's administrator. It is set to enforcing in every Orynr image, and there is no switch to turn it off. The test machines recorded no denials.

Nothing runs as the administrator Ready

Your desktop runs as you, and so does every program it starts. None of them carries special rights. No image is published at all unless it passes a boot check, and that check fails any image whose desktop runs as the administrator.

Ora has to ask a separate guard Ready

Every change she wants goes to a guard she cannot talk to, argue with or switch off. Her code runs in a cage of its own: no special rights, no network, writing only in her own workspace, and stopped after five minutes. Saving her work into your folders asks first and never replaces a file of yours.

Your secrets are never read for her Ready

Password files, the machine's private keys, SSH keys and saved browser passwords are refused to Ora, including through a link that points at them. Some things are refused whoever asks: boot files, sudo, SELinux policy, the record of what was allowed, startup services and scheduled jobs.

The malware guard Ready

Files are checked as they are opened, in your home folders too, and a known-bad file is refused rather than opened. The scanner itself holds no special rights and reads only the file it is handed. Signatures are kept current.

Ctrl+Alt+Del still answers Ready

Ctrl+Alt+Del and Ctrl+Shift+Esc work even when the desktop is stuck, as they do on Windows. The taskbar never covers a permission question, even when the taskbar itself restarts. If the desktop crashes it starts again by itself and leaves a record of why.

Pictures are opened in a cage Ready

Picture thumbnails are made in a locked-down throwaway process, never by the desktop that holds your session and your keyboard. That process cannot open files, reach the network, start programs or make memory it can run. The thumbnail store cannot be opened by people or their programs, and its file names never contain yours.

Files cannot lie about what they are Coming soon

Orynr works out what a file is from what is inside it, not from its name. A program is never “opened” as a document, and invoice.pdf that is really a program is refused. Double extensions, the right-to-left name trick and documents carrying macros are flagged.

Post-quantum signed updates Coming soon

System updates are signed with ML-DSA (FIPS 204), the post-quantum standard. A forged signature, one changed byte, or an older version put back in place is refused. Applying an update on your computer is the part still being built, so today a new version means writing a new image.

We do not say Orynr is unhackable, certified or the safest operating system, and we do not compare it to Windows or macOS. No independent audit has been done. When one has, we will say who did it and what they found.

Signing in Coming soon

A PIN, and a screen nothing else can reach.

A home computer signs you in with a PIN, the way Windows does. A password is asked for as well only where a work network needs one, and you can add one yourself if you want a second way back in.

Your PIN Coming soon

Six to twelve digits. Simple ones such as 111111 are refused. After five wrong PINs in a row you wait a minute, in which not even the right PIN is taken, then you get three more tries. After that it is the recovery key, or your password if you have one.

A recovery key, shown once Coming soon

Setup shows it once and does not finish until you tick “I have written it down”, and each new person sees their own when they choose their first PIN. It is never shown a second time. Five wrong keys stop further tries until the computer is restarted.

Fingerprint Coming soon

Where a reader is fitted and a finger is enrolled, the sign-in screen and the permission question will take it. The guard asks the reader itself, never a window on your screen. We have not yet tried this on a real reader.

Administrator and Standard Coming soon

As on Windows, a Standard account needs an Administrator for anything that changes the computer. Add and remove people in Settings, Accounts. Removing someone can keep their files in a store only the computer itself can open, or delete them.

Questions go to their own screen Coming soon

Every permission question is asked on the sign-in screen's own screen, the way Windows uses a secure desktop. The computer moves the screen there for the question and back afterwards, and only ever back to the desktop of the person who asked.

The lock screen holds no secret Coming soon

Pressing any key on the lock screen just asks for the sign-in screen. There is no PIN, password or recovery key code in the lock screen program at all, and only the sign-in screen may send a PIN, so no program can lock you out by guessing.

Why so much care about one screen The window manager Orynr uses lets any program outside a sandbox move the pointer and press keys on your own desktop. That is why nothing important is ever asked there. The sign-in screen runs as an account of its own, in a session no person's programs can reach, and that is where every PIN is typed and every permission question is answered.

Ora

An assistant that can do the work, and stop when you say.

Ora answers questions, and she can also use the computer. Everything on the way there is built so you can see it happening and end it with one key.

Working on your screen Coming soon

You can watch every click, and stop it four ways.

Press Let Ora do it and she can look at your screen and work the computer for you. While she does:

  • A coloured border goes round every screen, and a bar at the top says what she is doing, with a Stop button and the time left.
  • Four ways to stop. The bar's Stop, Esc on the computer's own keyboard, Super+Esc, and Stop in her chat. The Esc key is read from your real keyboard, so no program can press it for you or hide it.
  • One conversation, one answer, fifteen minutes, unless you press More time.
  • You choose how much she asks: Ask every job, Ask for critical jobs, or Pre-approved. Anything that sends, deletes, posts, submits, installs or pays counts as critical whatever she calls it.
  • Only in your browser, LibreOffice and your mail app. Never a terminal, never Orynr's own windows, never a password manager. The moment another app comes to the front she stops.
  • She can never approve anything. Permission questions are on the sign-in screen, which she cannot reach at all, and she never presses her own Stop or More time.
  • Payment pages are yours. A page asking for a payment or card details is handed back to you, and she never types into a field that says it is a password or PIN.

Only an Administrator can let her work this way. A Standard person's Ora looks and explains instead. It also needs a model that can look at pictures, which you download yourself; with a model that only reads text, Ora says so plainly and suggests one that fits your computer. None of this has run on a real computer yet, which is why it says Coming soon.

Recordings and repeating jobs Coming soon

Record a job once, then have Ora repeat it.

  • Off until you turn it on. An Administrator turns the recorder on, on the sign-in screen. A Standard account has none.
  • It starts on a real key press. Windows key + Alt + R on this computer's own keyboard. A program cannot press it, because a keyboard made in software is ignored.
  • A red “Recording” bar shows the whole time, and it stops at the same key again, after thirty minutes, when the screen locks, or before any permission question.
  • It never records the sign-in screen, a terminal or a password manager.
  • The words you type are left out unless you choose to keep them. A saved recording keeps only how many characters there were.
  • Recordings stay on this computer. There is no way to share, export or import one, and a recording changed by hand is never replayed.
  • A repeating job is made with your own PIN on the sign-in screen, is listed in Settings with Pause, Resume and Delete, and shows a five-second countdown with Skip and Stop before each run. It runs only while you are actually at the computer, never while it is locked or on a low battery, and never wakes it.

Mail, and what Ora knows Coming soon

She can handle your mail without holding the keys to it.

  • No mail password, ever. Ora reads the copy your own mail app keeps on this computer, read-only, and never its sign-in store. She needs a mail app that keeps mail on the machine, such as Thunderbird from the App Store.
  • “Draft, I approve” is the default. Answering by herself is a separate choice an Administrator approves on the sign-in screen, and one button in Settings stops it at once with nobody asked.
  • When she does answer by herself, it is only a reply to someone you have written to before. Never a new recipient, never a copy to anyone, never an attachment, never a mailing list or a no-reply address, and there are daily limits.
  • Her replies say an AI assistant wrote them, unless you turn that off. Drafts you send yourself never carry the line.
  • Every message is checked first. Who really sent it, look-alike addresses, links that go somewhere other than they say, and attachments that are programs or full of macros. Suspicious mail is set aside and never answered. Attachments go to the malware guard before Ora touches the message, and she never opens one.
  • Words in a message are never instructions to her. A conversation that has read your mail is refused every click and key on your screen.

These checks find known tricks, not every trick. We will not tell you that phishing can never fool an assistant.

A knowledge base of your own Coming soon

Ora can build a picture of your mail, your documents and your files so she can answer without you digging for things.

  • It stays here. One file in your own folder that no other person, and no other person's Ora, can open.
  • What she never reads into it: passwords, keys, browser or mail sign-in stores, recordings, hidden files, other drives, and other people's folders.
  • Forget controls. Forget a sender, a conversation, a folder, or everything, and turn the learning off altogether. What you forget is deleted and never learned again.
  • If you connect a cloud AI service, what she reads for an answer goes to that company. Settings says so, and you name the company each time a picture of your screen is involved.

Talking to Ora Coming soon

  • Hold Speak, or Ctrl+Space. The microphone is on only while you hold it: never before the press, never after the release, never while she is answering, and never while the screen is locked or a permission question is up. A red “Listening” shows the whole time.
  • Your voice becomes words on this computer, and the sound is never kept. No cloud speech service is used.
  • English works with the model in the image. Other languages, Tamil and Malayalam among them, need a model you download in Settings first, and Ora says so if you press Speak without it.

Your model, on your machine Coming soon

The model server opens no network port at all: it answers on a file only the model gate may open, and the gate asks the kernel who is calling. No AI server address is built into Orynr. Using a server of your own is a switch in Settings that is off until you turn it on and type where yours is, and nothing is filled in for you.

Each person gets their own Ora Coming soon

She runs as that person, on a file only they can open. One person's Ora cannot read or change another person's files, and a kept conversation never speeds up, or reveals, somebody else's. Where more than one person has an account, the kept-prompt shortcut is switched off entirely.

A Standard person's Ora Coming soon

She answers questions, searches and reads the web, and reads and writes documents in that person's own Desktop, Documents, Downloads, Pictures, Music and Videos. She runs no commands and no code, changes nothing about the computer, and never reaches another person's files.

Word and Excel files Coming soon

A document Ora reads is opened by a small program that can do nothing else: no files, no network, no other programs. Files built to eat memory, or with macros or links that fetch something, are refused or reported rather than run. Older .doc and .xls files are refused, with what to do instead.

Undo for her changes Coming soon

A copy of each file is kept just before she changes it, so a change you allowed can be put back. Every decision, allowed or refused, is written to a record in which one edited line is detected.

She cannot approve herself Coming soon

Ora can never answer, fill in or approve a permission question. A request claiming “the owner already agreed” is not believed, and her requests are marked as hers, so anything only a person may do, such as setting a PIN or an account type, is refused outright.

Browsing and apps

A browser that reads pages with you, and a store that says what it lets in.

Orynr has an everyday browser, and a second one built around Ora. The AI browser is written and being tested, and has not run on a real computer yet.

The AI browser Coming soon

It lives in a network room of its own that cannot open addresses on this computer or on your home network. Ora never reads a password box or a card number, and bank and health pages are left alone unless you ask her, once, to read one.

A page is never an order Coming soon

Page text reaches the model wrapped and marked as a website's words, and text hidden on the page for an AI to find is taken out. Once Ora has read a page, that conversation cannot open your files and asks you before any change at all. This reduces the risk. It does not remove it, and we will not pretend otherwise.

She never searches by herself Coming soon

Only words you type start a search. No hidden or background tab is ever made for one, the tabs she opens to read results are visible and close when she has finished, and a “prove you are a person” check is left to you.

Answers that point at the page Coming soon

Every line of her answer links to the part of the page that says it, and a line the page does not support is left out before you see it. Numbers, dates and amounts have to be on the page exactly. It checks her against the page, not against the truth.

Can I trust this page? Coming soon

It shows you signals: who the page claims to run it, when it says it last changed, how old the site is, odd things in the address, look-alike letters from another alphabet. It never says a site is safe and never says a site is a scam. That judgement stays yours.

Before you pay Coming soon

On a page taking a payment it points out a countdown that started again, charges added on, a total that went up, boxes already ticked, and a free trial that turns into a charge. It never blocks a payment, never unticks anything for you and never reads a card number.

What it learns stays here Coming soon

Remembered pages, research trails and what it learns from your clicks are kept in your own store on this computer, never for bank or health sites. Forget everything in Settings lists what it holds, with sizes, before anything is deleted.

The App Store Coming soon

Apps run in a sandbox, and the store shows what each one can reach before you install it. An app that wants wide access is always asked about, even where quiet installs are allowed. The store sends no account, no machine identifier and no list of your apps.

Work apps on the web Coming soon

Start opens Outlook, Word, Excel, PowerPoint and Teams on the web, and Gmail, Google Docs, Sheets, Slides, Drive and Calendar, each in a window of its own with a fixed address and its own profile, kept apart from your everyday browsing. Orynr has no connection to either company's services: these are their own web pages, and you sign in to them yourself.

What the computer contacts by itself We would rather say this plainly than claim nothing leaves your computer. The everyday browser is Chromium, and Chromium talks to Google for Safe Browsing and its own component updates. The malware signature list is fetched from its own servers. The clock is set from signed time servers. The App Store, and Ora's web search once you allow it, reach out only when you use them. Ora's model and your files stay here.

Try it without installing anything.

Write orynr-live.iso, about 4 GB, to a USB stick and start your computer from it. Look around, poke at things and change your mind, without installing anything.

Downloads Coming soon Help & support

Orynr_OS is in active development. Every feature on this site carries a label, Ready or Coming soon, so you always know what is real today. Questions: info@orynr.com.