Local by default
Personal context, memory, voice, camera, files, and learning stay on devices under your root identity.
THE USER-OWNED COMPUTING LAYER
Your operating system should know you.
Not own you.
WorldOS starts as TIMxAI and becomes <YOU> x AI. It is being built from first principles to think locally, act with visible authority, and balance work across only the devices you own.
- 65,536
- boot image bytes
- 0
- runtime dependencies
- 10/10
- core checks passing
TIMxAI is ready to become yours.
SYSTEM No account. No telemetry. This preview keeps nothing after refresh.
Visual interaction preview. The downloadable proof boots outside a host OS.
ONE RULE ABOVE EVERY FEATURE
Your data belongs to you.
Only you.
Authority you can see
Every meaningful action has a capability, policy decision, receipt, and undo or recovery path.
A friend, not a servant
It adapts its delivery and initiative while staying honest enough to challenge weak reasoning.
One user-owned flock
Owned devices share complete encrypted jobs, never ambient access to each other's data.
ONE SOURCE TREE. MANY HARDWARE HANDOFFS.
A clean-room system, from boot to mind.
WorldOS is not a reskinned distribution. Every shipped runtime layer is a TIMxAI implementation.
Orbit
Conversation, avatar, voice, vision, signing, and accessible control surfaces.
Mind
Owned model format, inference, memory, routines, uncertainty, and typed intentions.
Loom + Flock
Capability policy and encrypted whole-task scheduling across your devices.
Veil
User-rooted identity, encrypted data, recovery, export, migration, and deletion.
Fabric
Isolated, hardware-profiled drivers with explicit DMA, power, and device rights.
Pulse + ForgeBoot
Capability microkernel and TIM-authored firmware handoffs for each architecture.
THE FLOCK
Your devices become one private machine.
WorldOS measures what each enrolled device can safely contribute, reserves its local needs, and sends bounded work to the right node.
- Same user root identity
- End-to-end encrypted job envelopes
- Battery and thermal reservations
- No cross-user private compute
DEVICE REALITY, NOT VAPORWARE
One release. Honest support tiers.
A universal USB can carry several TIM-authored boot payloads. Vendor-locked boot chains still require owner controls or OEM authorization.
Open standards
x86 UEFI PCs, Arm SystemReady, certified Raspberry Pi profiles.
FIRST NATIVE TARGETSCertified profiles
Intel Macs, selected M1/M2 Macs, unlockable phones, documented routers and boards.
DEVICE-SPECIFICCompanion first
Locked Android variants, current M3/M4 research, consumer TVs.
BOOT OR DRIVER GATEOEM partnership
iPhone, iPad, production vehicles, and signature-locked appliances.
AUTHORIZATION REQUIREDRUNNING CODE / 2026-07-09
The first machine already wakes as WorldOS.
The 64 KiB AArch64 image boots as machine firmware. A second TIM-authored x86_64 UEFI application now boots from a TIM-authored FAT16 USB image.
PASS Freestanding link with no unresolved runtime symbols
PASS Bare-metal boot and interactive UART shell
PASS TIMM bounds checks, Q8 primitive, byte tokens, SHA-256 vector
PASS 10 core tests under memory and undefined-behavior checks
PASS x86_64 UEFI + FAT16 image reaches WorldOS in firmware smoke
NEXT Physical hardware acceptance, protected kernel, owned trained model, voice, vision, vault, flock
> firmware handoff
> TIMxAI worldos / aarch64
> runtime dependencies ........ 0
> storage writers ............. 0
> network paths ............... 0
Display name: Tim
Avatar: dragon
Tim x AI is awake.
Tim > Where is my data?
Tim x AI > Your data belongs only
to you. This proof has no disk writer
and no network stack.DEVELOPER PROOF
Boot what exists today.
The primary artifact is experimental x86_64 UEFI USB boot media. It does not install to the internal disk.
WorldOS x86_64 UEFI USB proofLoading release manifest...
- Release
- -
- Size
- -
- SHA-256
- -
Warning: writing an image erases the selected USB. Hardware tested: no. Internal-device installation: no.