ORZ HOLDINGS
← Research Repository
Orzatty Labs · Open Research

OpenRany

An open-source Agent Operating System built in Rust. 14 crates. 137,728 lines of code. 1,767+ tests. 16 security systems. Zero clippy warnings. One binary. Agents that actually work for you — not just respond to you.

LanguageRust (14 crates)
Lines of Code137,728
Test Suite1,767+ passing
Binary Size~32 MB
LicenseMIT
Contactresearch@orzatty.org

Table of Contents

  1. Abstract: What is an Agent OS?
  2. 14-Crate Architecture
  3. 7 Autonomous Hands
  4. 16 Security Systems
  5. 40 Channel Adapters
  6. 27 LLM Providers — 123+ Models
  7. Performance Benchmarks
  8. OpenAI-Compatible API
  9. Migration Engine
  10. Roadmap

1. Abstract: What is an Agent OS?

Traditional agent frameworks are chatbot wrappers. They wait for the user to type a message, call an LLM, return a response, and wait again. They do not take initiative, do not schedule autonomous work, and do not maintain persistent state between invocations.

OpenRany is fundamentally different. It is an Agent Operating System — a persistent runtime that manages autonomous agents as first-class processes with their own lifecycles, schedules, budgets, and capability sets. Like an operating system manages CPU processes, OpenRany manages agent processes: scheduling them, isolating them, giving them tools, and enforcing resource limits.

Concrete Distinction A traditional agent framework: you type "research my competitors" → it responds → you type again.
OpenRany: you activate the Collector Hand → it monitors your competitors continuously at 6 AM every day, builds a knowledge graph over weeks, and sends you a summary to Telegram when something critical changes. You never type a second command.

OpenRany compiles to a single ~32 MB binary. One install. One command. Agents are live.

curl -fsSL https://openrany.orzatty.com/install | sh
openrany init     # Walks through LLM provider setup
openrany start    # Dashboard live at http://localhost:4200
openrany hand activate researcher  # Remote research agent starts working

2. 14-Crate Architecture

OpenRany is a Rust Cargo workspace of 14 crates, each with a single architectural responsibility. The modular structure enables independent testing, feature flagging, and compilation:

CrateResponsibility
openrany-kernelOrchestration, workflows, metering, RBAC, scheduler, budget tracking
openrany-runtimeAgent loop, 3 LLM drivers, 53 built-in tools, WASM sandbox, MCP, A2A protocol
openrany-api140+ REST/WS/SSE endpoints, OpenAI-compatible API surface, web dashboard backend
openrany-channels40 messaging adapters with rate limiting, DM/group policies, output formatting
openrany-memorySQLite persistence, vector embeddings, canonical sessions, automatic compaction
openrany-typesCore types, taint tracking, Ed25519 manifest signing, model catalog
openrany-skills60 bundled skills, SKILL.md parser, FangHub marketplace integration
openrany-hands7 autonomous Hands, HAND.toml manifest parser, lifecycle management
openrany-extensions25 MCP templates, AES-256-GCM credential vault, OAuth2 PKCE flow
openrany-wireOFP P2P protocol with HMAC-SHA256 mutual authentication
openrany-cliCLI with daemon management, TUI dashboard, MCP server mode
openrany-desktopTauri 2.0 native app (system tray, notifications, global shortcuts)
openrany-migrateMigration engine from OpenClaw, LangChain, AutoGPT configurations
xtaskBuild automation, release tooling, documentation generation

3. 7 Autonomous Hands

Hands are OpenRany's primary user-facing innovation — pre-built autonomous capability packages that run independently on schedules, without requiring user prompts. Each Hand is defined by a HAND.toml manifest specifying tools, settings, requirements, and dashboard metrics, plus a multi-phase operational playbook (500+ word expert procedures, not one-liners).

Clip YouTube → viral shorts pipeline. Downloads video, identifies best moments, cuts into vertical format, adds captions, optionally AI voice-over, publishes to Telegram/WhatsApp. 8-phase pipeline using FFmpeg + yt-dlp + 5 STT backends.
Lead Daily B2B prospecting. Discovers prospects matching your ICP, enriches with web research, scores 0–100, deduplicates against existing database, delivers in CSV/JSON/Markdown. Builds ICP profiles over time.
Collector OSINT-grade intelligence. Monitors a target (company, person, topic) continuously. Detects changes, tracks sentiment, constructs knowledge graph. Sends critical alerts when something important shifts.
Predictor Superforecasting engine. Collects signals from multiple sources, builds calibrated reasoning chains, makes predictions with confidence intervals, tracks own accuracy using Brier scores. Has a contrarian mode.
Researcher Deep autonomous research. Cross-references multiple sources, evaluates credibility using CRAAP criteria (Currency, Relevance, Authority, Accuracy, Purpose), generates cited reports with APA formatting.
Twitter Autonomous X/Twitter account manager. Creates content in 7 rotating formats, schedules for optimal engagement, responds to mentions, tracks performance. Has an approval queue — nothing posts without your OK.
Browser Web automation agent. Navigates sites, fills forms, handles multi-step workflows. Playwright bridge with session persistence. Mandatory purchase approval gate — never spends money without explicit confirmation.
openrany hand activate researcher  # Starts working immediately
openrany hand status researcher    # Check progress
openrany hand activate lead        # Daily prospecting on schedule
openrany hand pause lead           # Pause without losing state
openrany hand list                 # See all available Hands

4. 16 Security Systems — Defense in Depth

OpenRany was designed security-first. Every security layer is independently testable and operates without a single point of failure. The 16 systems operate simultaneously and provide comprehensive coverage:

1
WASM Dual-Metered SandboxTool code runs in WebAssembly with fuel metering + epoch interruption. A watchdog thread kills runaway code.
2
Merkle Hash-Chain Audit TrailEvery action is cryptographically linked to the previous. Tamper with one entry and the entire chain breaks.
3
Information Flow Taint TrackingLabels propagate through execution — secrets are tracked from source to sink, preventing unintentional leakage.
4
Ed25519 Signed Agent ManifestsEvery agent identity and capability set is cryptographically signed. Unsigned agents cannot execute.
5
SSRF ProtectionBlocks private IPs (RFC 1918), cloud metadata endpoints (169.254.169.254), and DNS rebinding attacks.
6
Secret ZeroizationZeroizing<String> auto-wipes API keys from memory the instant they are no longer needed. No key survives its scope.
7
OFP Mutual AuthenticationHMAC-SHA256 nonce-based, constant-time verification for all P2P networking connections.
8
Capability Gates (RBAC)Agents declare required tools in their manifest. The kernel enforces these declarations — no undeclared tool access possible.
9
Security HeadersCSP, X-Frame-Options, HSTS, X-Content-Type-Options applied to every HTTP response from the API layer.
10
Health Endpoint RedactionPublic /health returns minimal info. Full diagnostics require authentication — no information leakage to unauthenticated callers.
11
Subprocess Sandboxenv_clear() + selective variable passthrough. Process tree isolation with cross-platform kill on timeout.
12
Prompt Injection ScannerDetects override attempts, data exfiltration patterns, and shell reference injection in agent skills and user inputs.
13
Loop GuardSHA-256-based tool call loop detection with circuit breaker. Handles ping-pong patterns and infinite delegation chains.
14
Session Repair7-phase message history validation and automatic recovery from corruption — no agent crashes from malformed state.
15
Path Traversal PreventionCanonicalization with symlink escape prevention. ../ in any file path argument is rejected at the kernel level.
16
GCRA Rate LimiterCost-aware token bucket rate limiting with per-IP tracking, stale entry cleanup, and configurable burst allowance.

5. 40 Channel Adapters

OpenRany agents can deliver results and accept commands from 40 messaging platforms, across every major category:

CategoryPlatforms
CoreTelegram, Discord, Slack, WhatsApp, Signal, Matrix, Email (IMAP/SMTP)
EnterpriseMicrosoft Teams, Mattermost, Google Chat, Webex, Feishu/Lark, Zulip
SocialLINE, Viber, Facebook Messenger, Mastodon, Bluesky, Reddit, LinkedIn, Twitch
CommunityIRC, XMPP, Guilded, Revolt, Keybase, Discourse, Gitter
Privacy-FirstThreema, Nostr, Mumble, Nextcloud Talk, Rocket.Chat, Ntfy, Gotify
WorkplacePumble, Flock, Twist, DingTalk, Zalo, Webhooks

Each adapter supports per-channel model overrides, DM/group policies, rate limiting, and output format customization (e.g., HTML for Telegram, Markdown for Discord).

6. 27 LLM Providers — 123+ Models

OpenRany routes through 3 native LLM drivers (Anthropic, Gemini, OpenAI-compatible) to reach 27 providers:

Anthropic, Gemini, OpenAI, Groq, DeepSeek, OpenRouter, Together, Mistral, Fireworks, Cohere, Perplexity, xAI, AI21, Cerebras, SambaNova, HuggingFace, Replicate, Ollama, vLLM, LM Studio, Qwen, MiniMax, Zhipu, Moonshot, Qianfan, Bedrock, and more.

Features: intelligent routing with task complexity scoring, automatic fallback on error, cost tracking per-request, and per-model pricing in the model catalog. Agents can specify model preferences per task type — e.g., use deepseek-r1 for reasoning tasks, gemini-flash for speed-critical tasks.

7. Performance Benchmarks

All data from official documentation and public repositories — February 2026. OpenRany positions as the optimal balance point between ZeroClaw (minimal, tiny) and Python-based frameworks (feature-rich but heavy):

Cold Start Time (lower is better)

OpenRany
180ms ★
LangGraph
2.5s
CrewAI
3.0s
AutoGen
4.0s

Idle Memory (lower is better)

OpenRany
40MB ★
LangGraph
180MB
CrewAI
200MB
AutoGen
250MB

Security Systems (higher is better)

OpenRany
16 ★
ZeroClaw
6
AutoGen
2

8. OpenAI-Compatible API

OpenRany exposes a drop-in replacement for the OpenAI Chat Completions API. Any tool built for OpenAI (LangChain, LlamaIndex, custom integrations) works with OpenRany by changing one URL:

// Drop-in replacement — change only the base URL
curl -X POST localhost:4200/v1/chat/completions \
  -H "Content-Type: application/json" \
  -d '{
    "model": "researcher",     // This is an OpenRany Hand, not an LLM model
    "messages": [{"role": "user", "content": "Analyze Q4 AI agent market trends"}],
    "stream": true
  }'

140+ REST/WS/SSE endpoints covering: agents, memory, workflows, channels, models, skills, A2A (Agent-to-Agent), Hands, analytics, and administration.

9. Migration Engine

Switching from an existing agent framework to OpenRany requires one command. The migration engine imports agents, conversation history, skills, and configurations from OpenClaw, LangChain, and AutoGPT:

# Migrate everything from OpenClaw
openrany migrate --from openclaw

# Dry run first to preview changes
openrany migrate --from openclaw --dry-run

# OpenRany reads SKILL.md natively and is compatible
# with the ClawHub marketplace — no skill rewrites required

10. Roadmap

VersionTargetFeature
v0.1Feb 2026First public release. All 7 Hands, 40 channels, 14 crates, 1,767+ tests. ✓ Released
v0.2Q2 2026FangHub marketplace v1: publish and install community Hands
v0.3Q2 2026OrzattyAccount integration: SSO for team agent management
v0.4Q3 2026OrzattyOS native package: openrany service on OrzattyOS workstations
v1.0Mid-2026Stable API. No breaking changes. Production hardening.
© 2026 ORZ Holdings — Open Research. OpenRany is MIT licensed. research@orzatty.org