Sovereign Desktop · QEMU Verified

Build the machine.
Prove the machine.
Own the machine.

Nexus OS forges deterministic operating systems from signed recipes: from sensors and robots to fleets, satellites, and industrial edge. Every artifact has provenance. Every driver is isolated. Every boot is auditable.

Or run it now: curl -fsSL https://get.nexus-os.org | sh && nexus run --profile=micro --demo
QEMU x86_64 RISC-V ARM64

One Forge. Every Domain.

Whether you are building a robot controller, a satellite image, a secure gateway, or an industrial edge node — you define the recipe, the Forge builds the proof.

Robotics

Deterministic control loops, sensor fusion, signed robot skills.

Industrial Edge

SCADA/energy control with auditability and TSN discipline.

Aerospace

Radiation-aware, no-heap, watchdog-first satellite builds.

Medical

Deterministic medical runtime with syscall-level audit trail.


Recipe → Forge → Signed Image → Device

You write what you need. The Forge resolves, builds, signs, and proves. No hand-rolled images. No "it works on my machine." Only deterministic, reproducible systems.

01

Recipe

Write a KDL manifest declaring your edition, modules, and constraints.

02

Forge

Resolve dependencies, graft drivers, compile, and hash the output.

03

Sign

Ed25519 signature + Variant-CID + ProvChain attestation.

04

Deploy

Flash to device, register to fleet, prove every bit at boot.


Declare What You Need

A recipe is a KDL manifest that declares your edition, target architecture, kernel configuration, modules, and runtime constraints.

edition "NEXUS_MECH" { target "aarch64-virt" kernel { scheduler "harmonic-hard" memory "locked" } modules { include "nip:drivers/imu/bno055" include "nip:drivers/lidar/velodyne" include "nip:lib/kinematics" exclude "nip:net/*" } constraints { no_heap = true max_boot_ms = 500 } }

The Forge resolves dependencies, validates constraints, compiles, hashes, and signs. You get a bootable image with a complete provenance chain.


What the Forge Produces

.img

Bootable Image

Raw disk image ready to flash to SD card, NVMe, or network boot. Partitioned, formatted, and populated.

.npk

Package Archive

Self-contained NIP package with all dependencies bundled. Installable on any Nexus system.

.bkdl.json

BKDL Evidence

Complete dependency tree with BLAKE3 inputs, build flags, and license summary. Supply-chain transparency.

.proof

ProvChain Proof

Cryptographic attestation of the entire build: source → compiler → artifact. Anyone can verify.


ctrlX Signs Apps. Nexus Signs Reality.

App stores solve installation. Nexus solves trust. Linux real-time solves latency. Nexus solves survivability. Device portals show what is installed. Nexus proves what is running.

ProvChain

Every build, boot, and mutation is logged to an append-only ledger. The entire chain from source to runtime is auditable and tamper-evident.

Variant-CID

Content-addressed packages: if the hash matches, the binary is identical. Rebuild anywhere, verify everywhere. No trust required — only math.

Capability Algebra

No root. No god-mode. Every fiber holds only what it needs. Pledge/unveil enforced at hardware level. A compromised driver cannot touch the kernel.


Three Tiers. One Sovereign Stack.

From individual hackers to defence contractors — every builder gets the same architecture, with support and guarantees scaled to their mission.

Feature Open Nexus
Free
Nexus Foundry
$49 / build
Nexus Citadel
Contact
Stream Rolling Quarterly freeze 10-year LTS
Recipe builder CLI Visual + CLI On-prem visual
Build runners Local only Cloud + local Cloud + on-prem
Signed output Self-sign Foundation sign Foundation + audit
Indemnity Included
Air-gap Manual Export bundle Silo factory

Nexus Silo — air-gapped government/critical infrastructure factory. Contact for classified environments.


Built for Your Vertical

Each edition enforces hard technical constraints at build time. You cannot accidentally ship a network stack to orbit.

NEXUS_MECH

Nexus Robotics

Deterministic control loops, sensor fusion, signed robot skills.

  • Real-time harmonic scheduler
  • IMU/LiDAR IRQ support
  • Optional no-heap mode
NEXUS_GRID

Nexus Grid

SCADA/energy control with auditability and TSN discipline.

  • 60Hz harmonic lock
  • Time-Sensitive Networking
  • Full audit log
NEXUS_DRIVE

Nexus Drive

Automotive image factory with lockstep and safety constraints.

  • ISO26262 subset
  • Dual-lockstep support
  • IOMMU "Glass Cage"
NEXUS_ORBIT

Nexus Orbit

Radiation-aware, no-heap, watchdog-first aerospace builds.

  • No heap allocation
  • Static tasks only
  • Watchdog mandatory
  • Reed-Solomon ECC
NEXUS_PULSE

Nexus Medical

Deterministic medical runtime with syscall-level audit trail.

  • 100% determinism
  • Audit every syscall
  • Medical-grade pledges
NEXUS_CORE

Nexus Core

Standard enterprise server. SMP enabled. Full TCP/IP stack.

  • SMP multi-core
  • Full networking
  • Standard server profile

More Than a Kernel

Nexus is a complete sovereign computing ecosystem: package catalog, developer SDK, partner network, and fleet management — all built on cryptographic truth, not corporate trust.

01

Sovereign Bazaar

Browse signed packages and recipes. Inspect the source. Rebuild the binary. Every package carries a Variant-CID and a provenance proof.

Browse Packages →
02

Unbound SDK

Build proprietary NPKs without source disclosure. Your code, your IP. The SDK does not infect your work with GPL or copyleft.

Get the SDK →
03

Foundry Partners

Hardware vendors, recipe contributors, and commercial vertical integrators building the sovereign ecosystem together.

Become a Partner →

Build Something That Matters

We are not looking for people who want to use an operating system. We are looking for people who want to build one. Kernel hackers. Systems programmers. Hardware engineers. Anyone who looked at the state of computing and thought: we can do better than this.