Spaces OS dispatch #7

Week 10 - Jul 09

You can use an eraser on the drafting table or a sledgehammer on the construction site.

— Frank Lloyd Wright

A cheezy quote, to mark the landing of our new agent sandbox. As discussed last week, we reworked how agents are being sandboxed. With each agent now running in their separate systemd unit, and each integration as well. With an added protection coming from Landlock. The agent can talk to the skill, without getting access to their tokens.

Agent frontend

This week we started looking at how we could provide the new underlying secure architecture to other agents and harnesses. We built our own UI by necessity. It would be great if we could make our OS secure foundation available to the rest of the LLM ecosystem. Then we could benefit from all the advances happening in that space (and reversely). TBD.

In the meantime, our pi-chat has gained a new setting pane to configure the new, isolated integrations we currently have.

Voice input support

We created a new Tuner GUI for the voxtype STT daemon. By having the user go trough a configuration setup, we can make sure their microphone works well, and also improve the quality of the decoding by tuning it to their voice. This works is still in progress, screenshot coming next week once it lands.

Nemotron is also showing good promise as a model, being able to decode audio faster than realtime. This means we can actually support streaming support with minimal delays. We haven't enabled it by default because streaming is more expensive on the GPU; each chunk goes trough more processing because it does language detection.

Building a new UI was also a great opportunity to play with Slint.dev, a new declarative UI framework, that is liter weight than QML (which we are currently using for our agent). Building a toolkit of re-usable component would also be useful for user-generated applications.

Once this work is done, we're thinking about integrating with live meeting recording and transcription.

Next up

With the sandboxing work done, next week will be spent doing a bit of cleanup, and then start looking even deeper into the architecture.

Release

https://github.com/generational-infrastructure/spaces-os/releases/tag/spaces-2026.07.10