
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
SpielOS: a clean durable Goal runtime with declarative Departments, evidence, and approvals.
The operating system for AI-run companies.
spielos.xyz · one durable Goal loop, Agent-owned Departments, approvals, evidence, and memory — all local, all on disk.
GOAL → OBSERVE → DECIDE → ACT → EVALUATE
Turn business intent into measurable Goals. The Director Agent (in OpenCode or Codex) owns the conversation; SpielOS owns the durable loop behind it: every run, work order, approval, evidence record, and memory item is persisted in a local SQLite database — never lost when a chat session ends.
One line with pipx (requires Python 3.11+):
pipx install spielos && spielos init --dir my-company -y
One line with Homebrew:
brew install shayanspiel/tap/spielos && spielos init --dir my-company -y
One line with npm (thin launcher; needs the Python package too):
npm i -g spielos && pipx install spielos && spielos init --dir my-company -y
One line with curl:
curl -fsSL https://raw.githubusercontent.com/ShayanSpiel/SpielOS/main/install.sh | sh
The chosen folder becomes a self-contained SpielOS home: the runtime
spine, Director agent + host adapters for OpenCode and Codex, and empty
private state. The spielos command itself is a global CLI — your company
data always lives in the folder you chose.
cd my-company
opencode # or: codex
In OpenCode: run /agents, select the Director agent, and talk to
it — it already sees your company state.
In Codex: talk to the Director agent — it already sees your company state.
No manual probing, no status commands to start: the host injects a fresh,
read-only company projection into every model request.
pipx upgrade spielos && spielos update --dir /path/to/your/home
update refreshes only the vendored spine and host adapters; your private
.spielos/ state, owner profile, memory, and user Departments are always
preserved. Stale files from older releases are pruned so the home matches a
fresh install exactly.
| Concept | What it is |
|---|---|
| GoalRuntime | The one durable control loop: observe, decide, act, evaluate |
| Goal | A measurable outcome with an owner, metric, and target |
| Department | A declarative, Agent-owned capability package |
| Workflow | Ordered steps with declared evidence and approval keys |
| Agent | Performs claimed work orders through a Host |
| Evidence | Immutable proof attached to Goals and Runs |
| Memory | Three scopes: owner profile, workflow learning, strategy learning |
| Approval | Explicit owner keys — external actions always park first |
Fresh homes start with zero Departments — add clean declarative packages only when their Goal, Workflow, Agent, Evidence, and approval contracts are ready.
Useful commands:
spielos status
spielos overview
spielos context
spielos memory summary
spielos profile list
spielos notifications list
spielos runner tick
git clone https://github.com/ShayanSpiel/SpielOS.git
cd SpielOS
PYTHONDONTWRITEBYTECODE=1 python3 -B -m unittest company.tests.test_clean_core_acceptance
FAQs
SpielOS: a clean durable Goal runtime with declarative Departments, evidence, and approvals.
The npm package spielos receives a total of 20 weekly downloads. As such, spielos popularity was classified as not popular.
We found that spielos demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.