OAO handles the hard parts of running AI agents: orchestration, durable runs, retries, state. You just define the agent and hand off tasks. Open source, on your infrastructure, with any model provider.
OPEN SOURCE ANY MODEL PROVIDER MANAGED CLOUD — COMING SOON
Investigate shipment SHP-1042 and summarize the delay.
Shipment SHP-1042 (road) is in transit — delayed 14 h at the Rotterdam hub by a missed customs slot. New ETA 24 Aug, 12:00 UTC. Full timeline written to report.md.
OAO is not tied to a single vendor. Connect the model providers you choose — commercial clouds and open-source models alike — and combine them in one platform. Run Claude next to Grok next to Llama, give every agent the model that fits its job, and swap providers without rewriting a thing.
Each agent version pins its own model preset — a coordinator on one provider can delegate to children on entirely different ones.
Llama, Qwen, DeepSeek, GLM and Mistral are first-class citizens, not an afterthought.
Agents only ever see named presets — never a hardcoded model ID — so switching providers is a config change, not a migration.
OAO speaks plain HTTP and Server-Sent Events — no proprietary protocol, no required client library. Create a session, stream its events, and pick up exactly where you left off after any disconnect.
curl -X POST "$OAO_API/v1/projects/$PROJECT_ID/sessions" \
-H "Authorization: Bearer oao_your_secret" \
-H "Idempotency-Key: $(uuidgen)" \
-d '{
"agentId": "8f2b1c04-…",
"initialMessage": "Investigate shipment SHP-1042 and summarize the delay."
}'curl --no-buffer "$OAO_API/v1/projects/$PROJECT_ID/events" \
-H "Accept: text/event-stream" \
-H "Last-Event-ID: 142"
event: run.state_changed
event: tool_call.requested
event: run.completedEvery endpoint is documented at docs.oao.sh — approvals, caller-owned tools, files, skills, and the full event reference. A typed TypeScript SDK is on the way.
Two ways to run OAO: the full open-source platform on your own hardware, or the managed cloud where every project picks its region — EU or US. Built EU-minded either way: sovereignty is a feature, not a compliance checkbox.
The full platform under the Apache-2.0 license — coming soon. Your PostgreSQL, your object storage, your provider keys. Run it on any cloud or in your own datacenter; your data stays wherever you run it.
github.com/vectrix-ai/oao →The hosted platform with nothing to operate — durable runtime, console, backups and event streams included. Create a project, pick where it runs, and the data stays in the region you chose.
Built on Flue — the durable runtime at the backbone of OAO — with PostgreSQL as the single source of truth. No bolted-on queues, no state scattered across services.
Reusable packages of instructions and resources with progressive disclosure — agents see a small catalog entry first and load full instructions only when needed, keeping context lean.
A coordinator pins an exact roster of child agent versions, each with its own durable thread — sharing one sandbox workspace without mixing conversation histories.
One workspace per thread, reused across runs on Daytona sandbox infrastructure. Network mode and capabilities — filesystem, shell, browser — are selected exactly, per published agent version.
Every completed run re-archives the workspace to S3-compatible storage. If the sandbox disappears, OAO restores it before the agent gets any tools.
Your app claims tool requests under a lease with monotonic fencing, does the work in your environment, and submits one immutable, schema-validated result. Stale workers can't commit.
One ordered event feed per project. Disconnect at any moment and resume from your last committed position — the stream is the source of truth, not a best-effort broadcast.
Every tenant isolated. Every agent sandboxed. Enforced by the runtime, not a policy.
Row-level security scopes every query. Org and project IDs live in every key.
Each agent runs in its own sandbox. Filesystem, shell, browser and network are allow-listed per version.
Provider keys are encrypted and can never be read back. Responses carry only a fingerprint.
Secrets and auth headers never appear in logs or event streams. A platform rule, not a lint warning.
An AI agent whose configuration — prompt, model preset, skills, tools, sandbox policy, and limits — is published as an immutable version, and whose runs are executed durably by the platform. You define what the agent is; OAO takes responsibility for keeping its work alive, inspectable, and reproducible.
Nothing is lost. The run is a durable PostgreSQL obligation held under a lease. When the crashed worker's lease expires, another worker acquires it with a higher fencing token and resumes the run. The stale worker can never commit anything afterwards — fencing tokens make sure of it.
Today: OpenRouter, Anthropic, Grok (xAI), and OpenAI — with OpenRouter unlocking 100+ further models, including open-source ones, and more direct providers on the way. Mix them freely: different agents (or a coordinator and its children) can each run on a different provider. You bring your own keys; they're encrypted write-only, and agents only ever see approved, named model presets — never a raw model ID or credential — so switching providers is a config change, not a migration.
Yes — that's the caller-owned tool protocol. Your application claims a pending tool request under a lease, executes it in your environment with your credentials, and submits one immutable result that's validated against the schema pinned in the agent version. OAO never needs access to your internal systems.
Wherever you decide. Self-hosted, OAO runs entirely on your infrastructure — your PostgreSQL, your object storage — and nothing phones home, so your data stays wherever you run it. On OAO Cloud you choose an EU or US region when you create a project, and your data stays in that region.
It will be. The platform lives at github.com/vectrix-ai/oao and is being prepared for an open-source release under the Apache-2.0 license, alongside OAO Cloud, a managed version for teams who don't want to operate it themselves. It builds on Flue, the durable runtime at its backbone. Join the waitlist to hear the moment either is ready.
OAO is in active development. The waitlist is the way in: early access to OAO Cloud, and a heads-up when the open-source release lands.
Be first in line for OAO Cloud and the open-source release.
You're on the list — talk soon.
Early access to OAO Cloud and the open-source release. No spam, ever.
OPEN · DURABLE · PORTABLE
