▛▞ // :: Z3NSEN Systems :: 3OX.Ai :: 1n3ox.ai
5 :: 6 :: 7 :: 7 :: 2
 LIVE · ⧗-26.064
▛▞ // ⟦⎊⟧ :: Z3NSEN Systems
3OX.Ai

3OX.Ai is a fixed-shape, model-agnostic substrate for running AI agents as durable systems. Swap models, move devices, evolve capabilities — 3OX holds its shape. Built to outlast any single model, team, or cloud provider.

Get the repo Architecture
macOSbrew install bun
Linuxcurl -fsSL https://bun.sh/install | bash
Windowsirm bun.sh/install.ps1 | iex
scroll

Every AI agent built today will break when its model is deprecated.
3OX is the fix — a fixed-shape substrate that holds identity, policy, and runtime
independent of any single model, cloud, or framework.

▛▞ // triad invariant — the algo that makes 3OX agentic
fn mutate(box, change)  receipt {
  // Nothing is real unless it passes through the gate
  proposal  = 3ox.propose(change, box.hash_before)
  warden.validate(proposal, box.rules, box.imprint)

  // Every mutation produces a triad — this is the heartbeat
  event     = tape.append({ action, actor, path, hash_before, hash_after })
  state     = pulse.advance(box.state, event)
  receipt   = pulse.emit_receipt(event, state, merkle.root)

  // The system is alive when work occurs. No timers.
  // If nothing changes, nothing beats. Dormant, not dead.
  // If something changes, it produces proof chains. That is aliveness.
  return receipt
}
LangChain gives you chains. CrewAI gives you roles. AutoGPT gives you loops.
None of them give you persistence, proof, or internal services.
3OX is the infrastructure layer they all assume exists.
▛▞ // Proof of Work 3ox commit → receipt → merkle
One commit. Four artifacts. Chained, append-only, tamper-evident.
If there is no proof, it didn't happen.
receipt · (6)Pulse/receipts/
receipt_id receipt_1771000076_4159
workflow_id FORGE.LIFECYCLE
verb RETENTION
scope_root !WORKDESK
mode dryrun
timestamp 1771000076
pulse · event stream
event_id evt_26.056_4a8f
action commit
actor cursor.agent
path !WORKDESK/soul.md
outbound sha256:7a3f..c8e1
internal xxh128:0b2d..9f74
merkle · _meta/merkle.root
root sha256:7274d738..e7f9f1
algo sha256
scope pulse
count 42
chain sha256:9e2b..03fd
log · (6)Pulse/3ox.log
2026-02-25T14:32:05Z
event RETENTION
actor cursor.agent
target !WORKDESK
receipt receipt_1771000076_4159
▛▞ // Why 3OX the gap no one else fills
Frameworks give you tools. 3OX gives you the substrate.
Between your code and permanent operation.
Without 3OX
× Agent dies when the process stops
× State scattered across Redis, Postgres, memory
× No proof any operation happened
× Framework upgrades break everything
With 3OX
Agent persists across restarts, crashes, model swaps
State lives inside 3OX — no external dependencies
Every mutation produces a cryptographic receipt
Fixed shape. Swap models, nothing breaks.
You don't need another framework. You need the substrate underneath all of them — persistence, proof, and services that run whether the model is GPT, Claude, Gemini, or something that doesn't exist yet. That is 3OX.
▛▞ // 01 Running Today ● LIVE · ⧗
Not a whitepaper. These agents are live right now.
What other frameworks leave to you.
Money.Bagz
Agent responding live in Telegram.
TelePromptR
Routes inbound messages by topic and command to the correct agent.
speaker-mesh
Inference bridge. Streaming responses across model backends.
3ox CLI + Vec3Boot
Rust workspace. Build and boot tooling for 3OX agents.
:: ∎
▛▞ // 02 · 6 3OX Faces — Agent Identity & Execution ρ{identity}.φ{policy}.τ{run}
One fixed shape holds identity, policy, and execution. Models change, 3OX doesn't.
The 6-face contract every agent inherits.
▛▞ // Spark
Spark
sparkfile.md
soul.md
AGENTS.md
▛▞ // Toolkit
Toolkit
Tools/tools.yml
Skills/skills.md
▛▞ // Pulse
Pulse
3ox.log
receipts/
▛▞ // Rules
Rules
limits.toml
write_policy
▛▞ // Brains
Brains
brains.rs
→ brains binary
Spark
Spark
sparkfile.md · soul.md
Brains
Brains
brains.rs → binary
Rules
Rules
limits.toml
Toolkit
Toolkit
tools.yml · skills.md
Links
Links
routes.json
Pulse
Pulse
3ox.log · receipts/
:: ∎
▛▞ // 03 · 7 vec3 Kernel — Runtime Directories .3ox/.vec3/
Persistent runtime. Survives restarts, crashes, model swaps.
Process, memory, state, and executables inside every 3OX.
.vec3/
├──rc/run.rb, lifecycle entry scripts
├──lib/metatron, warden, elixir modules
├──dev/io, ops, deploy helpers
├──var/wrkdsk, agent.events.jsonl, state
├──bin/CLI tools, brains, 3ox executables
├──mem/agent memory store
└──proc/process registry
:: ∎
Unix is 55 years old. Erlang/OTP is 38. 3OX is built on patterns that survived the mainframe era, the PC era, the cloud era, and the AI era. Models change. Substrates persist.
▛▞ // 04 · 2 Anchors — Identity & Runtime _meta · _TRON
Two anchors. Provable identity and governed execution.
_meta holds truth. _TRON holds contracts.
ANCHOR 01 · IDENTITY
_meta
Z3N.PRO.ID · operational identity SESSION.CHECKPOINT.toml · resume anchor merkle.root · integrity hash receipts/ · audit trail
::
ANCHOR 02 · RUNTIME
_TRON
systemd/lifecycle/proto/v1/ state.guard.proto · FSM contracts receipt.emit.proto · single writer queue.dispatch.proto · phase dispatch PROTO.LOCK.toml · sealed version
:: ∎
▛▞ // 05 · 7 Service Mesh — Coordination Layer ρ{route}.φ{govern}.τ{emit}
Internal services. No external dependencies.
TPW Triad governs. Pipeline executes.
TPW Triad — Core Governors
TAPE
Append-only receipt stream. Audit source. Never truncated.
Elixir / OTP
PULSE
Event emitter. Writes receipts, feeds merkle, drives the log.
Ruby
WARDEN
Policy enforcer. Approves transitions, guards write policy.
Rust
execution pipeline
Arc
Inference routing. Directs to the right model or agent.
Queue
Task dispatch. Phase-aware, proto-bound.
Worker
Executes tasks under Warden approval.
Supervisor
Orchestrates via declared contracts only.
:: ∎
▛▞ // 06 · 5 5TRATA — Containment Chain ρ{contain}.φ{chain}.τ{scope}
Containment from root command down to single agent. Nothing floats unscoped.
Five-layer hierarchy that governs where anything can exist.
L0
CMD
Root command layer. All scopes descend from here. Cross-device authority.
L1
Base
A named environment — ZENS3N.PRO, CITADEL, OBSIDIAN. Owns its 3OX and TRON contracts.
L2
Station
A logical grouping within a Base. Organizes services and routing domains.
L3
Service
A running process — TelePromptR, speaker-mesh, Warden. Bound to proto contracts.
L4
Agent
The leaf. One 3OX, one identity, one persona. Swappable model, fixed contract.
:: ∎
Every agent framework assumes infrastructure exists that doesn't. No persistence. No proof. No internal services. 3OX is that infrastructure.
▛▞ // 07 TRON — Contract-Governed Runtime replaces cron
Replaces cron with deterministic state transitions.
Six phases. Nothing skipped. Nothing unwitnessed.
TRACK PLAN DRY_RUN FIX EXECUTE SEAL
WARDENapproves every transition
TAPEcarries append-only events
PULSEwrites receipts + merkle
Principlesingle authority per concern
Workerexecutes
Supervisororchestrates via contracts
:: ∎
▛▞ // 08 Boot An Agent ▛▞ // BOOT
Four commands from clone to live agent.
The shortest path to a running 3OX.
  1. 01
    Clone and entergit clone git@github.com:LLMasterDesign/ZENS3N.git
  2. 02
    Scaffold A 3OXruby 3OX.Ai/3OX.BUILDER/setup-3ox.rb ./MyAgent GUARDIAN Sentinel
  3. 03
    Boot the chainruby .3ox/.vec3/rc/run.rb — loads sparkfile → soul → brains → tools → routes → limits → 3ox.log
  4. 04
    Deploy to VPSSync 3OX, merge TelePromptR config, restart TRON lifecycle services.
:: ∎
▛▞ // 09 Open Source github.com/LLMasterDesign
Full source. No vendor lock-in. Fork it, own it.
Inspect every line. Trust nothing you can't read.
:: ∎
Your agents will outlast GPT-4, GPT-5, and whatever comes after. 3OX holds its shape.

Stop losing agents every time the model changes.

One 3OX. One identity. Every model. Four commands to a running agent that outlasts any provider, any framework, any era.

Get the repo Architecture
macOSbrew install bun
Linuxcurl -fsSL https://bun.sh/install | bash
Windowsirm bun.sh/install.ps1 | iex