System of record · Control plane

The system of record for work performed by AI agents.

Keep using Codex, Claude, Gemini and your own internal agents. Kernel gives their work persistent state, clean handoffs, approvals, artifacts and human visibility across every runtime — without asking you to change the tools your agents already run.

Request access Read the docs

Self-hosted and local-first. Your data and your agents' work stay in your deployment.

Kernel's Home screen: running sessions, the Needs You count, recently completed work and runtime health.

What Kernel is

A place work is recorded, and a place people stay in control.

A Work item holding its goal, constraints, sessions, decisions and artifacts across two runtimes.

Durable state

Every Work item, session, decision, artifact and handoff is recorded as it happens. When an agent stops, the record of what it did — and why — remains.

Human control

Approvals, blockers and a single "Needs You" inbox put a person in the loop where it matters. Nothing irreversible happens without someone deciding it should.

Runtime-neutral

Kernel is not another agent. It sits alongside the runtimes you already use and gives their work one shared structure, so a handoff between them keeps its context.

The handoff

Move unfinished work between runtimes without moving the transcript.

Kernel compiles the goal, the constraints, what is already done, the decisions taken and the open questions into a compact package. A person can read it before anything starts, and the destination runtime begins with the context rather than the chat log.

Typical package: ~2 KB
Runtimes supported: 4
Inspectable before it runs: 100%

A compiled handoff package showing goal, constraints, decisions, artifacts and open questions.

The model

Four things, and the controls around them.

Work: A unit of work with a goal, constraints, acceptance criteria and a state you can see.
Sessions: A runtime's attempt at a Work item, with its events, artifacts and decisions attached.
Handoffs: A compiled package that moves a Work item between runtimes or people without losing context.
Runtimes: Codex, Claude, Gemini and internal agents, registered with their detected capabilities.

See how the model works →

Built for teams that need a record they can trust.

Tenant isolation, least-privilege tokens, a metadata-only default and no per-person ranking. Read the security and privacy architecture, or ask for access.

Security & privacy Request access