On this page
Active used Started Jul 2026

RossLabs Ambient Agent

Private macOS chief-of-staff assistant that watches authorized information, prepares next actions, and records what it did in one durable ledger.

Private Repo
Swift SwiftUI Rust SQLite macOS

The problem

People carrying several consequential roles lose time reconstructing context across projects, commitments, and relationships. A useful assistant must prepare the next move without quietly turning a recommendation into an external commitment.

What I built

RossLabs Ambient Agent is a standalone macOS assistant with a native Swift shell, a Rust execution engine, and one app-owned SQLite writer. It reads only authorized sources, assembles relevant context, and prepares recommendations, drafts, private-wiki updates, and user-only calendar items for review.

The current product boundary is deliberate: it may prepare work, but V1 does not send, submit, share, publish, invite, transact, or commit anything to another person. The execution ledger records admitted work, provider activity, verification state, recovery, and a redacted Activity projection without treating model completion as proof that an external outcome occurred.

Architecture

  • Native surfaces: a macOS hub and bounded iPhone companion built in Swift and SwiftUI.
  • Execution kernel: a Rust engine owns bounded work admission and provider execution.
  • Durable state: one SQLite writer commits operational state and an append-only, hash-chained execution ledger.
  • Authority boundary: grants determine what a module may read or prepare; unresolved or unsafe effects fail closed.
  • Privacy boundary: current validation uses disposable, non-private synthetic data while private-data readiness remains a release gate.

Current evidence

The repository contains the native apps, Swift core and CLI harness, Rust engine, unit suites, and synthetic dogfood evidence. Those artifacts establish source and local build behavior only. They do not establish a production release, long-duration reliability, private-data readiness, or physical-device behavior beyond the specific checks recorded in the repository.

The repository is private and the product is not publicly available.