# RasnuOS — The AI SRE That Asks Before It Acts

> Connect any Linux, macOS, or Windows server in 30 seconds. Diagnose production incidents in plain language, open live browser terminals, edit config files with automatic backups and 1-click Undo, migrate sites directly between hosts, and govern every change with human Approval Cards and a permanent audit trail.

- Website: https://os.rasnu.com
- Full Single-File LLM Knowledge Base: https://os.rasnu.com/llms-full.txt
- Open-Source Host Agent Repository (Public & Documented): https://github.com/rasnu/os-agent
- Contact & Support: support@rasnu.com
- Enterprise Architecture: enterprise@rasnu.com
- Security Disclosures: security@rasnu.com

## Core Capabilities (6 Jobs in One Workspace)

1. **Converse & Diagnose (`/product#converse`)**: Ask plain-language questions across a single server or your entire fleet. Automatic secret redaction strips passwords, API keys, and tokens on the server before log lines reach the AI.
2. **Operate (`/product#operate`)**: Browser terminal, visual file manager and code editor with syntax checks and automatic `.bak` backups, live process manager, and 20+ one-click service installers (Nginx, PostgreSQL, Docker, Redis, SSL, WireGuard).
3. **Protect (`/product#protect`)**: Every non-read-only command pauses on a human Approval Card showing exact file diffs, risk level, and rollback plan before execution. Supports Manual Approval, Team/CAB Review, and Auto-Resolve modes.
4. **Migrate (`/product#migrate`)**: Direct server-to-server encrypted rsync transfers with zero cloud storage relay, dry-run previews, bandwidth caps, and automated post-transfer health checks.
5. **Observe (`/product#observe`)**: Real-time 15-second CPU, memory, disk, and service health telemetry, incident radar alerts, and token usage cost tracking.
6. **Integrate (`/product#integrate`)**: Native approval routing and notifications via ServiceNow, Jira, Slack, Microsoft Teams, PagerDuty, Telegram, Email, and HMAC-signed webhooks.

## Key Pages & Documentation

- [Home](https://os.rasnu.com/): Overview of conversational server operations, human-in-the-loop Approval Cards, and 30-second agent setup.
- [Full Technical & Product Reference for LLMs](https://os.rasnu.com/llms-full.txt): Single-file complete specification, pricing matrix, security architecture, and comparison tables.
- [Open-Source Host Agent (`rasnu/os-agent`)](https://github.com/rasnu/os-agent): Public Go source code, build instructions, security architecture, and signed multi-OS binaries.
- [Product Overview](https://os.rasnu.com/product): Full 3-pane Incident Mode Workspace, 6 core jobs, operational boundaries, and interactive walkthrough.
- [Platform Architecture](https://os.rasnu.com/platform): Cross-platform agent (<15 MB static binary for Linux, macOS, Windows on amd64/arm64), outbound port 443 transport, and persistent infrastructure memory.
- [Security & Verifiable Trust](https://os.rasnu.com/security): Open-source agent verification, cryptographically signed releases, outbound-only TLS, edge secret redaction, and tamper-evident activity logs.
- [Pricing & Plans](https://os.rasnu.com/pricing): Free plan (1 server + welcome usage balance), Solo, Startup, Business, and Enterprise tiers with 100% of monthly subscriptions credited to your usage wallet.
- [Enterprise Governance](https://os.rasnu.com/enterprise): Role-based access control (RBAC), CAB webhook gates, IP allowlists, and custom SLAs.
- [FAQ](https://os.rasnu.com/faq): Answers on AI safety, server privacy, control-plane downtime resilience, and prepaid usage wallet billing.
- [Changelog](https://os.rasnu.com/changelog): Verified Control Plane and cross-platform agent release history.
- [Community](https://os.rasnu.com/community): Open-source agent discussions, playbooks, and issue reporting.
- [Contact](https://os.rasnu.com/contact): Technical support, security team, and enterprise inquiries.

## Engineering Blog

- [From Alert to Approved Fix in 13 Seconds](https://os.rasnu.com/blog/launch): Visual architecture study of incident detection, root-cause diagnosis, and fleet rollouts.
- [Zero-Trust Agent Supply Chain](https://os.rasnu.com/blog/signed-releases): Offline release signing, embedded public-key verification, and fail-closed updates.
- [Why Autonomous Server AI Needs Approval Gates](https://os.rasnu.com/blog/why-ai-asks): Approval state machine, role-based execution matrix, and external CAB webhooks.
- [Inside the Dual-Layer Guardrail Pipeline](https://os.rasnu.com/blog/guardrail-engine): 4-gate safety funnel combining cloud command inspection and local host protection rules.

## Infrastructure Tool Comparisons

- [RasnuOS vs Ansible & Terraform](https://os.rasnu.com/compare/ansible-terraform): Live interactive server operations and troubleshooting vs static IaC provisioning.
- [RasnuOS vs AWS Systems Manager (SSM)](https://os.rasnu.com/compare/aws-ssm): Multi-cloud and bare-metal conversational server management without IAM complexity.
- [RasnuOS vs Datadog + PagerDuty](https://os.rasnu.com/compare/datadog-pagerduty): Pairing 15-second telemetry with automatic root-cause diagnosis and 1-click approved fixes.
- [RasnuOS vs Teleport & Bastion SSH](https://os.rasnu.com/compare/teleport): Zero-inbound-port access and browser terminals combined with an AI SRE.
- [RasnuOS vs Rundeck & Static Runbooks](https://os.rasnu.com/compare/rundeck): Adaptive AI playbooks with live context vs brittle static bash scripts.
- [RasnuOS vs ChatGPT + Manual SSH](https://os.rasnu.com/compare/chatgpt-ssh): Why live server context, automatic secret redaction, visual diffs, and 1-click Undo beat copy-pasting terminal commands.