Engineering Sovereign Intelligence for the Local Machine
Kyro is an open-source, local-first autonomous desktop AI agent developed as a flagship project from Tonmoy Infrastructure and is owned and architected by systems engineer Eshan Roy. Built with a native Rust core, Tauri v2 shell, and zero-trust permission governance, Kyro operates under a strict principle: your hardware, your data, your sovereign control.
SQLite WAL & zero telemetry
Multi-threaded core engine
Hardware OS keyring vault
Free & inspectable code
Official Brand Mark
Coral Red · #E5484D
Systems, Infrastructure & Sovereign Computing Lab
https://tonmoyinfrastructure.org/
Tonmoy Infrastructure and Vision (TIV) is an independent engineering organization dedicated to building practical, sovereign software platforms, internet infrastructure, networking systems, and local-first developer runtimes. Kyro represents its flagship desktop autonomous agent for high-assurance local computation.
Eshan Roy
Systems engineer and software developer who created Kyro. Leading the architectural design and implementation of its multi-threaded Rust native core, Set-of-Marks visual coordinate grounding, centralized zero-trust authorization pipeline, and dual-mode desktop interface.
Core Architectural Tenets
Why Kyro was constructed from first principles rather than wrapped in conventional cloud scripting.
The Model Proposes. The Runtime Decides.
Deterministic Execution BoundaryMost agentic platforms grant probabilistic LLMs direct shell and file access. Kyro rejects this vulnerability. An AI model can only suggest structured tool proposals; Kyro's deterministic Rust runtime evaluates every operation against strict policy allowlists, path barriers, and explicit human confirmations before anything is executed.
Sovereign Local Custody & Zero Telemetry
No Cloud Sinks, No Data HarvestingCloud-dependent AI services upload your workspace code, shell outputs, and screenshots to external corporate clusters. Kyro stores all memories, task logs, vector embeddings, and execution histories locally in high-performance SQLite WAL databases on your hardware. Zero background tracking.
Fail-Closed Container Isolation
Never Degrade to Unsafe Host ExecutionWhen containerized execution is enabled, Kyro routes commands through isolated Docker boundaries. If the container daemon crashes or the bridge drops, Kyro abruptly halts execution with an explicit alert rather than silently falling back to run dangerous commands on the host machine.
Hardware Vault OS Keyring Storage
Zero Plaintext API Keys on DiskCredentials and model API tokens are never saved in cleartext configuration files or environment blobs. Kyro delegates storage directly to native OS security hardware: macOS Keychain, Linux Secret Service (libsecret), and Windows Credential Manager.
The High-Performance Native Stack
Multi-threaded execution engine handling tool dispatch, safe shell tokenization (shlex), Set-of-Marks visual coordinates, and local PDF FlateDecode decompression with zero overhead.
Ultra-light native desktop shell replacing heavy Chromium instances. Delivers sub-second cold starts, native OS system tray integrations, and minimal hardware resource footprints.
Dual experience modes: Everyday Mode for natural language desktop workflows and Developer Workbench for full terminal logs, git checkpoints, and diff reviews.
From Sovereign Research to Desktop Agent
Sovereign Architecture Thesis at Tonmoy Infrastructure
Conceived within Tonmoy Infrastructure as a countermeasure against cloud AI vendor lock-in, recurring per-seat fees, and invasive telemetry pipelines. The objective: give developers and knowledge workers complete computational sovereignty.
Rust Core Engine & Visual Grounding Implementation
Architected by Eshan Roy in Rust, establishing a fast native executor and integrating Set-of-Marks visual UI grounding for pixel-accurate cross-application automation without reliance on brittle web selectors.
Zero-Trust Governance & Dual-Mode Workbench
Implementation of the centralized permission pipeline, fail-closed Docker sandboxing, OS keyring security, and the React 19 / Tauri v2 dual-mode interface (Everyday Mode & Developer Workbench).
Open Source v0.1.0 & Model Context Protocol (MCP)
Release of Kyro under the permissive MIT license on GitHub, dynamic contributor discovery, cross-platform AppImage / DMG builds, and standardized MCP connector expansion.
100% Free & Open Source Under the MIT License
Kyro belongs to the community. No artificial feature gating, no telemetry spyware, and no recurring enterprise seat licenses. Fork the code, audit the Rust engine, or contribute back.