AI-native internal operations platform — turning will into real.
Built by CyberSkill — a 10-person Vietnam-based software consultancy. CyberOS is the AI-native operating system for the company: 22 federated modules across five phased rollouts (P0 → P4), unified by a three-layer BRAIN, a persona-aware CUO orchestrator covering 47 C-roles with 221 workflows chaining 104 author+audit skill pairs, six cross-cutting infrastructure pillars (AUTH · AI Gateway · MCP Gateway · OBS · GraphQL Federation · NATS), and a Vietnamese-market wedge of localised skills. Shipped today: memory Layer 1 (233/235 tests), skill catalogue (104 pairs · 108 contracts · 5 Vietnamese public bundles), CUO supervisor Phases 1–4 (49/50 tests · 6 Handler subclasses), BRAIN service Wave 1 (ingest pipeline + AGE graph mirror + search API live), and AUTH service Wave 2 (11 migrations + JWT/JWKS + admin REST + bootstrap CLI + 22-role RBAC + TOTP MFA + HIBP + OIDC SSO live — only Passkey enrolment open). The remaining 17 modules land between P0 · exit and P4 · GA.
The CUO supervisor (Phases 1-4 shipped 2026-05-18, 49/50 tests green) routes natural-language queries through two stages — first to a persona, then to one of that persona's workflows — and auto-dispatches one of 6 Handler subclasses per workflow pattern:. Each workflow chains shipped author+audit skill pairs from the SKILL module's 104-pair catalog; every step emits a BRAIN audit row, every chain emits a session-end summary. The catalog reached steady-state after Session H — Sessions I-N added 124 niche workflows with zero new skills surfaced, validating that a stable ~100-skill catalog serves the long tail of C-suite orchestration.
CyberOS is built on three shipped modules that compose to form an AI-native operating system. Every other module in the catalog plugs into this triangle.
Append-only audit ledger
Local-first, audit-chained memory. Three layers: FS at the edge (.cyberos-memory/), pgvector + Apache AGE in the middle, archival corpus at the cold tier. MMR inclusion proofs, Ed25519-signed tree heads, deterministic export, GDPR purge.
Portable agentic skills
Open Agent Skills standard (Anthropic · VS Code · Cursor · Codex). Rust host + Bun toolchain. 5 Vietnamese-market skills shipped (MST · VAT · VietQR · CCCD · legal); tax-filing is planned. Three-level progressive disclosure; 12/12 Python ↔ Rust parity tests green.
Chief Universal Officer
The router. Natural language in, skill chain out, memory record on file. Genie is the mascot; CUO is the inner decision frame. 47 C-suite persona workflows load on demand. Notify / Question / Review ambient modes — never auto-acts on irreversible operations.
CyberOS ships as 22 modules — each owned end-to-end by one role, each independently deployable as an Apollo Federation v2 subgraph and a Module-Federation frontend remote. Click any cell to open its dedicated module page.
Phase ordering reflects the bet that internal productivity (P1) is the moat; external SaaS is P4 only.
Five gated phases (P0 → P4) over P0 → P4, anchored on dogfooding signal and compliance gates that flip every quarter. The headcount column tracks the founder's commitment: scale only when CyberOS itself absorbs the new operational load.
CUO presents as one Genie. Internally, 47 C-suite persona workflows load on demand via the open Anthropic Agent Skills format. The user sees Genie; Genie routes to whichever skill best fits the request. Same BRAIN, same persona-version stamp, same audit chain. Click any role to jump to its detail on the CUO page.
Vision · Strategy
Strategy memos · OKR cascade reviews · weekly state-of-business.
Operations
Status digests · blocker triage · cycle-end summaries.
Finance · Runway
Cashflow · AR/AP digests · burn alerts.
Marketing · Demand
Campaign briefs · content calendars · channel reports.
Technology · Info Systems
Tech debt · security advisories · OBS digests.
People · Talent
1:1 prep · performance summaries · onboarding.
Strategy
Competitive intel · scenario modelling · partnerships.
Legal · Compliance
Contract redline · GDPR/PDPL audits · DSAR triage.
Data
Data quality · lineage · residency reviews.
Product
Product brief drafts · roadmap analysis · user-research synthesis.
+ 4 emerging 2026 sub-personas: CAIO, CXO, CRO, CSO-Sustainability. See CUO page →
CyberOS plans for three jurisdictional concentric rings simultaneously. The inner ring (Vietnam) is the cornerstone — every CyberOS deployment respects it. The middle ring (cross-border) adds GDPR + Singapore PDPA when Singapore HoldCo flips at P3. The outer ring (international standards) lights up gate-by-gate.
Every layer locked in + Part 14. The bias is toward open-source, self-hostable, audit-able primitives — never lock CyberOS to a vendor that could later compromise the company's Vietnamese data sovereignty.