ORIENT
Read permitted Rooms, Strings, applications, resources, runtime posture, and provenance without inventing missing truth.
00NILLOW:// COGNITIVE OS
GIVE INTELLIGENCE SOMEWHERE TO LIVE.
Nillow OS is where your people and your AI work in the same place: rooms they share, tools each one may touch, memory that stays, and a boundary you set.
VIEW PREPARING
VIEW PREPARING
VIEW PREPARING
VIEW PREPARING
02BRACKETS + STRINGS
PROMPTS STOP BEING BLOBS. THEY BECOME CIRCUITS.
A Bracket turns one part of a prompt or output into a named, typed address. A String carries that exact fragment into a declared input elsewhere.
02BMULTI-PLANE COGNITIVE CONTROL
THE WORKFLOW CAN REASON ABOUT ITS OWN REASONING.
One circuit performs the work. A second reads only declared trace summaries and evidence posture. A third can return bounded candidates to exact Brackets—without rewriting goals, evidence, authority, or topology by implication.
BUILD A SWARM IN YOUR OWN SYNTHETIC LANGUAGE.
Nillow OS is the platform for engineering your own synthetic language and the AI swarm that operates through it. One swarm, seven contexts: team projects, a company network, departments, research teams, an AI business team, an AI-integrated company, and a market field. The organism changes shape without losing its structure; people retain decisions, agents take bounded roles, tools stay attached, and handoffs stay typed.
04X:// PERSONAL INTELLIGENCE
THE INTELLIGENCE THAT REASONS WITH YOU.
OXA is Nillow’s architecture-aware personal intelligence: the part of the OS that reasons with you about the system you are building—not a chat bubble bolted onto it.
Inside Nillow, OXA lives in Portal and interprets only the evidence your profile is allowed to see: which Rooms and Strings exist, what changed, which applications and governed resources are available, the current runtime posture, and where authority stops.
Neuromorph gives OXA continuity through provenance-bearing memory of structure, events, attempts, and receipts. OXA can turn intent into a bounded proposal, explain its scope and consequences, and route approved work through Nillow’s policy, capability, and execution owners.
- PERMITTED EVIDENCE
- BOUNDED PROPOSAL
- EXPLICIT DECISION
- OUTCOME RECEIPT
INTERPRET
Explain changes, contradictions, blockers, and relationships so the operator can see what the system actually knows.
ENGINEER
Shape typed proposals for tools, settings, Rooms, Strings, or packaged architecture—with scope, consequences, and confirmation made visible.
ACT WITH RECEIPTS
Route approved work through the same policy, capability, and executor owners as a human—never a secret admin tunnel—and report completion only when an outcome receipt returns.
System-aware. Never system-sovereign.
05RIGHTS / GOVERNED
EXPLICIT RIGHTS. NO IMPLIED OWNERSHIP.
You reach Hydra one way: the web Portal. Controlling the host, owning an artifact, holding a license, joining a Room, and having permission to run it are different rights.
External models and services connect through bounded permissions. No provider owns the operating environment.
Running Portal on your own machine does not hand you the construction. External intelligence enters through explicit interfaces instead of receiving broad, implicit control.
RUN IT YOURSELF
Run what you built where you want it: exported to Portal on your own computer with a model API you supply, or hosted in the cloud as your own private system.
RUN IT AS A BUSINESS
Keep the structure in the cloud and rent it to other people. They receive the interface, the actions and the results—never the construction itself.
REQUEST NILLOW OS→
This opens a scoped Nillow OS project brief. Commercial terms, seat provisioning, installation, device enrollment, and runtime access follow an accepted scope.
- VISIBLE ≠ EDITABLE
- CONNECTED ≠ TRUSTED
- SUBSCRIBED ≠ OWNER
- AI ≠ ADMIN
The model is a component. It is not the kingdom.
06CAPABILITY PROJECTION
SHARE THE CAPABILITY. KEEP THE SYSTEM PROTECTED.
Share an interface, service, workflow, or API without exposing the protected system behind it.
Using a capability does not grant access to its prompts, agents, logic, internal structure, data, or intellectual property.
Joining a Room, using a protected service, and installing a package are different permissions. None implies ownership or inspection.
WORK TOGETHER
Invite someone into a defined environment. Participation does not transfer its architecture.
OFFER IT
Offer specific inputs, outputs, and actions through a protected interface. Use does not grant inspection.
PROTECTED USE
Provide governed use without transferring the underlying architecture or its ownership.
INSTALL IT
Install a contained cognition package under explicit licensing and compatibility rules. Installation, activation, execution, and ownership remain separate.
Access grants use—not ownership of the system behind it.
07THE NILLOW ECOSYSTEM
AI TOOLS SHOULD COMPOUND, NOT ACCUMULATE.
Build a governed system whose context, memory, capabilities, and structure can be reused—instead of adding another disconnected tool for every problem.
FOR THE INDIVIDUAL
Projects, files, tools, agents, memory, and personal intelligence can stop living in disconnected tabs.
FOR THE COMPANY
Human and AI work can operate inside shared structure, explicit roles, measurable flow, and precise authority.
FOR THE BUILDER
Create reusable cognitive systems instead of rebuilding another isolated application for every problem.
FOR THE COGNITION ENGINEER
Build cognitive capabilities that can be exposed, licensed, supported, or distributed without automatically revealing the underlying intellectual property.
INSIDE NILLOW / OPERATING ARCHITECTURE
ONE ORGANISM. SPECIALIZED SYSTEMS.
Nillow keeps orchestration, execution, memory, resources, identity, authority, and OXA in distinct systems so one component cannot quietly control everything. These systems operate as one governed organism without collapsing their responsibilities.
PORTAL
The continuity body, governed workbench, and application host.
HYDRA
The geometry of rooms, nodes, strings, and dimensions.
TENDRIL
Local identity, capacity, placement, devices, and lawful reality.
PORTYGON
The membrane around governed resources and cognitive packages.
SOCIAL
Profiles, relationships, invitations, and actor scope.
TRUST
Composes domain-owned capability and policy evidence into grant or deny decisions.
RADULIX + DATA SCRAPER
Radulix is Nillow’s private browser for treating the external web as untrusted evidence. Data Scraper turns approved sources into structured, reviewable records. Neither browsing nor collected evidence grants authority.
NEUROMORPH
Structural memory rebuilt from the scoped event journal.
X
Portal-resident intelligence that interprets permitted evidence, plans with consequences, and acts only through existing authority and receipts.
CHIMERA
Security posture composed from facts owned across the organism.
Hydra defines eligible work. Portal prepares it. Trust grants or denies it. RuntimeAuthority decides when and how it may run; Tendril supplies the device reality. Every bounded execution returns a receipt for Neuromorph and OXA to interpret.
NEXT / COGNITION ENGINEERING
STOP ASSEMBLING TOOLS. START ASSEMBLING INTELLIGENCE.
Build an operating environment around how you think, work, create, and coordinate with machines.
REQUEST NILLOW OS→
This opens a scoped Nillow OS project brief. Commercial terms, seat provisioning, installation, device enrollment, and runtime access follow an accepted scope.
NILLOW:// COGNITIVE OS
PUBLIC SYSTEM MODEL / CUSTOMER DATA ISOLATED / NO RUNTIME AUTHORITY