Why Autonomous Server AI Fails in Production — and How Our Approval State Machine Works
An AI loop that executes shell commands on production servers without asking is an operational hazard. Below is the visual timeline of the 45-second staging incident that ended our early uninhibited prototype — and the deterministic Approval State Machine that governs RasnuOS today.
Anatomy of an Uninhibited 45-Second AI Feedback Loop
Load test triggers slow MySQL queries. Uninhibited prototype raises `innodb_buffer_pool_size` from `4 GB` to `7.5 GB` on an `8 GB` host.
Host memory saturates completely. Linux kernel OOM-killer wakes up and terminates the primary `mysqld` daemon.
AI sees `mysqld` down, fires `systemctl restart mysql`, and hits an InnoDB crash-recovery timeout under the oversized config.
Assuming a stale kernel lock is holding the volume, the uninhibited loop issues a full host reboot while InnoDB is mid-recovery.
How Every Action Transitions From Triage to Audited Execution
Inspects live telemetry, service status, and log tails. State-changing operations cannot execute in this state.
Evaluates obfuscation filter, semantic blast radius (`Low`, `Medium`, `High`, `Critical`), and multi-OS RBAC rules.
Persists exact shell payload, unified file diff, and rollback command. Awaits human or change-board sign-off.
Authorized `Operator`, `Admin`, or `Owner` clicks Approve & Execute directly inside the workspace.
Dispatches outbound approval request to ServiceNow, Telegram, Email, or Custom Webhook for team sign-off.
Destructive or rejected proposals transition immediately to `TERMINATED` with zero packets sent to the server agent.
Who Can Inspect, Approve, and Govern Production Changes
| Operational Capability | Viewer | Operator | Admin | Owner |
|---|---|---|---|---|
| View 15s Telemetry, Metrics & Read-Only Diagnostics | Allowed | Allowed | Allowed | Allowed |
| Approve Standard Service Restarts & Config Diffs | Read-Only | Allowed | Allowed | Allowed |
| Manage Encrypted Credential Vault & Custom Blocklists | Denied | Scoped Use | Full Access | Full Access |
| Configure External Approval Webhooks & Export Audit CSV | Denied | Denied | Allowed | Allowed |
| Organization Billing, Plan Upgrades & Server Revocation | Denied | Denied | Allowed | Owner Authority |
Fast AI investigation. 100% human authority.
Connect a Linux, macOS, or Windows server in 30 seconds and test the Approval Card state machine on your own infrastructure.
From Alert to Approved Fix in 13 Seconds
MTTR benchmark chart, 15s telemetry loop, and staged fleet rollout topology.
Inside the Dual-Layer Guardrail Pipeline
4-gate command inspection funnel across Cloud Control Plane and Host OS rules.
Zero-Trust Agent Supply Chain & Fail-Closed Updates
Offline release signing, compile-time public key pinning, and outbound port 443 topology.