SpielOSCAUTION
An open-source AI company operating system: Goals, Runs, Workers, and AI departments under one Director loop (OBSERVE → DECIDE → ACT → EVALUATE). Run your company with AI agents.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
The operating system for AI-run companies.
spielos.xyz · one durable Goal loop, Agent-owned Departments, approvals, evidence, and memory — all local, all on disk.
GOAL → OBSERVE → DECIDE → ACT → EVALUATE
Turn business intent into measurable Goals. The Director Agent (in OpenCode or Codex) owns the conversation; SpielOS owns the durable loop behind it: every run, work order, approval, evidence record, and memory item is persisted in a local SQLite database — never lost when a chat session ends.
Install
One line with pipx (requires Python 3.11+):
pipx install spielos && spielos init --dir my-company -y
One line with Homebrew:
brew install shayanspiel/spielos/spielos && spielos init --dir my-company -y
One line with npm (thin launcher; needs the Python package too):
npm i -g spielos && pipx install spielos && spielos init --dir my-company -y
One line with curl:
curl -fsSL https://raw.githubusercontent.com/ShayanSpiel/SpielOS/main/install.sh | sh
One line with curl and a Department bundle (local folder or git URL):
curl -fsSL https://raw.githubusercontent.com/ShayanSpiel/SpielOS/main/install.sh | sh -s -- --bundle /path/to/bundle-folder
--bundle installs the product, creates the home, and imports the Department in one step, then prints your next steps. Bundle folders come from company export (a complete repository with a README that onboards you through OpenCode, Codex, or Claude Code with a paste-prompt block).
The chosen folder becomes a self-contained SpielOS home: the runtime spine, Director agent + host adapters for OpenCode, Codex, and Claude Code, and empty private state. The spielos command itself is a global CLI — your company data always lives in the folder you chose.
Talk to your Director
cd my-company opencode # or: codex
In OpenCode: run /agents, select the Director agent, and t
3ff83bc728fdOBSERVED · 2026-10-10Install
Commands as the repository documents them. They are shown, not run.
npm i -g spielos && pipx install spielos && spielos init --dir my-company -y
git clone https://github.com/ShayanSpiel/SpielOS.git
git clone <this-repository-url> research_briefs-bundle
Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| claude-code | mentioned | |
| codex | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
# Brief writing One decision-ready brief per week: - Lead with the one decision the brief enables. - Every claim cites its signal id (no uncited assertions). - Three sections maximum: signal, insight, recommendation. - Tone follows strategy/brief-voice.md.
Trust audit
CAUTIONgrade C · trust 77/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- declared (7 observation(s))
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (9)
module = importlib.import_module(module_name)
module = importlib.import_module(module_name)
module = importlib.import_module(module_name)
module = importlib.import_module(module_name)
module = importlib.import_module(module_name)
.spielos-boundary.json
curl -fsSL https://raw.githubusercontent.com/ShayanSpiel/SpielOS/main/install.sh | sh
curl -fsSL https://raw.githubusercontent.com/ShayanSpiel/SpielOS/main/install.sh | sh -s -- --bundle /path/to/bundle-folder
Gates applied: no_behavioural_pass.
3ff83bc728fdfull audit observations/trust-audit/skill/shayanspiel__spielos.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | 3ff83bc728fd | CAUTION | C | 77 | first audit |
Questions
What does the SpielOS skill do?
An open-source AI company operating system: Goals, Runs, Workers, and AI departments under one Director loop (OBSERVE → DECIDE → ACT → EVALUATE). Run your company with AI agents.
Is SpielOS safe to install?
With care. The audit graded it C (77/100) and found 9 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can SpielOS access on my machine?
The audit observed that it reaches the network and runs shell commands. Each of those is consistent with what it says it does. Secrets in the source: none found.
Which assistants does SpielOS work with?
Its documentation mentions claude-code and codex. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (3ff83bc728fd), read on 2026-10-10. The repository is watched, and a new audit runs when it changes — this is the first audit.