ROS
OSA-Midnight Oil
Local only Version 0.2
Local encrypted workspace

An operations desk,
not a cloud app.

A local-first desktop workspace built around a master-locked encrypted vault. Planning, notes, reference capture, identity organization, wallet storage, research tooling, and a cinematic ROS-style shell — self-contained, offline, yours.

Operator
RaliOs
Storage
Local only
Workspace
Encrypted
Network
Offline capable

Four domains.
One unlock.

The cockpit organizes every module into one of four doctrines. Apps load inside the shell, not as floating windows. The unlock state in the center is non-negotiable — nothing renders until the workspace is decrypted.

Unlock Cockpit
local only
operator memory ready

Twelve modules.
One cockpit.

Each module renders inside the shell — no scattered floating windows. The workspace is the product; the model is the last-mile intelligence layer.

Operate
Research
Memory
Signal
System

Overview

CORE

High-level workspace status, counts, trust summary, and quick capture.

Vault Notes

MEMORY

Markdown-first notes with structured templates and live preview.

Library

RESEARCH

Local document catalog and reader workflow.

Research Vault

RESEARCH

Structured research intelligence records and study comparison.

Profile Organizer

IDENTITY

Identities, VoIP lines, phone book, PGP bundles, operator records.

ROS Comms

SIGNAL

Local/native secure messaging workflow.

Nostr Lounge

SIGNAL

Lightweight read-first social sidecar.

F*Society

LAN · NATIVE

Native-only LAN room for discovery, chat, handoff notes, direct file sends.

Flow Studio

SYSTEM

Wireframe flow and system mapping for operational design.

Wallet Vault

SIGNAL

Wallet records and sensitive material inside the locked workspace.

Control Room

SYSTEM

Backup, recovery, trust posture, export/import, destructive controls.

Midnight Console

UTILITY

Local read-only console into the workspace state.

The model is the last mile,
not the product.

Bundled model cards for regular use. ROS prepares local models in the app; raw provider endpoints and technical names live behind Advanced setup for builders.

Primary Surface
Model Workspace
DeepNimSec / Security Model v1
DeepNimSec Defensive Review
Bundled

Normalizes project memory into DeepNimSec risk, evidence, controls, and safer next steps.

Review risk Normalize evidence Map controls Score findings
Citizen-AI / Project Blueprint
Defensive Cognition Training
Bundled

Creates lab-only defensive training scenarios, bias reviews, verification coaching, and after-action summaries.

Lab scenarios Bias recognition Verification coaching

Four tiers.
One product.

Individual stays free forever. Pro unlocks the full operator workspace. Enterprise serves linked teams. Founder Edition is the early-access unlock for operators who want in before the line forms.

Tier 01

Individual ROS

$0

Free forever. The local cockpit starting point.

  • + Local encrypted workspace
  • + Core modules (Overview, Notes, Library)
  • + Manual capture & search
  • + Web + Tauri builds
  • Local model catalog
  • Team / LAN features
Download →
Tier 03

Enterprise ROS

$49 /seat/mo

For ops cells and small teams running together.

  • + Everything in Pro
  • + F*Society LAN room (up to 12)
  • + Shared encrypted handoff
  • + Team profile / PGP federation
  • + Recovery & trust audit reports
  • + Direct support channel
Contact team →
Tier 04

Founder Edition

$499 / once

Founder unlock. Long-lived license with reissue support.

  • + Everything in Pro, forever
  • + All future v1.x features included
  • + Founder badge in shell
  • + Private roadmap access
  • + Lifetime upgrades within major
  • + Transferable license seat
Checkout pending →

Local-first means
literally local.

What is encrypted, what leaves the device, how local models run, whether telemetry exists — every answer is unambiguous.

// 01

Encrypted at rest

Workspace data is encrypted on disk. The key derives from your master passphrase and is never stored.

// 02

Decrypted only in session

Decrypted workspace state lives in memory only while the session is unlocked. Lock or close — it goes away.

// 03

No cloud required

Core functionality runs entirely offline. Sync is optional, opt-in, and never the default.

// 04

Auto-lock & manual lock

Idle auto-lock, manual lock, and an explicit nuke/reset flow are first-class shell controls.

// 05

Rust trust boundary

Sensitive operations execute in the Rust core via Tauri IPC, not in browser-managed storage.

// 06

No telemetry by default

The shell does not phone home. If diagnostic reporting is ever added, it is opt-in and inspectable.

Download ROS.
Unlock locally.

Individual ROS ships as a local desktop build. Installers come from ROS downloads, bundled model cards prepare inside the app, and paid tiers unlock with a signed offline key.

Downloads local installers
macOS Apple Silicon
macOS · arm64
Preparing
macOS Intel
macOS · x64
Preparing
Linux
Linux · x64
Preparing
Windows
Windows · x64
Coming soon