HadalOS Mobile
In developmentMobile platform
An assistant that is a system component, not an app with root.
HadalOS Mobile puts the assistant below the app layer and takes its hands away. The model proposes actions from a closed enum. A privileged broker containing no model code validates each one, shows it to you, and only then executes it by direct call.
- Base
- AOSP via CalyxOS tree
- Architecture
- arm64
- First target
- Pixel 6a (bluejay)
- Broker tests
- 38 unit, 23 on-device
The model never gets a shell
Every action the assistant can take comes from a closed, typed enum. There is no free-form command execution to escape from, because there is no command execution at all.
Egress denial is enforced at compile time
An SELinux neverallow rule denies the model host any socket, and the policy compiler checks it. A ROM that grants it one does not build — this is not a runtime directive somebody can edit out.
Boot resilience comes free from the platform
A/B slots and Android Verified Boot already provide what a hand-rolled last-known-good bootloader layout was built to do.