The research behind the runtime

AEROS is built around one idea: an embodied agent that keeps learning needs an identity layer — a frozen, cryptographically verifiable core that fixes who the agent is and what it is permitted to do, decoupled from the competence that keeps growing. Sandbox runtimes isolate what an agent process can touch; the identity layer governs which embodied individual is acting, under whose authority, within which behavioural envelope, with what auditable history. OpenShell governs the infrastructure; AEROS governs the individual.

One program, four pillars

The runtime's core mechanisms were each developed and evaluated as a research contribution first, then engineered into the subsystem that ships in the repository. The papers below are grouped by the pillar they built; more will be added as they land on arXiv.

Citing AEROS

If you use AEROS in research, please cite the relevant paper(s) above — the papers are the theoretical foundations, the repository is the engineering implementation. For the identity-layer idea as a whole, cite the perspective and the technical report:

@article{qin2026governable,
  title   = {Governable Individuals: An Identity Layer for Embodied Agents That Keep Learning},
  author  = {Qin, Xue and Luan, Simin and Yang, Cong and Li, Zhijun},
  journal = {arXiv preprint arXiv:2607.05463},
  year    = {2026}
}

@article{qin2026governed,
  title   = {Governed Individuation: Cryptographically Decoupling an Agent's Learning from Its Authority},
  author  = {Qin, Xue and Luan, Simin and Yang, Cong and Li, Zhijun},
  journal = {arXiv preprint arXiv:2607.04613},
  year    = {2026}
}

A CITATION.cff for citing the codebase itself ships in the repository.