|
1 | 1 | --- |
2 | 2 | layout: home |
3 | 3 | title: ONEComputer Docs |
4 | | -titleTemplate: Secure cloud workspaces for Claude |
5 | | -description: Install, operate, and extend ONEComputer. |
| 4 | +titleTemplate: Safe cloud workspaces for AI agents |
| 5 | +description: Learn how to install ONEComputer, run safe AI workspaces, and connect human approval through OpenVTC. |
6 | 6 | hero: |
7 | 7 | name: ONEComputer Docs |
8 | | - text: The open-source control plane for secure Claude workspaces. |
9 | | - tagline: Install the stack locally, understand the OpenVTC boundary, and operate the enterprise path from sandbox to verified approval. |
| 8 | + text: Build a safe place for AI agents to work. |
| 9 | + tagline: Install ONEComputer locally, understand how OpenVTC keeps approval separate, and follow the path from an employee workspace to a signed human decision. |
10 | 10 | actions: |
11 | 11 | - theme: brand |
12 | 12 | text: Install ONEComputer |
13 | 13 | link: /getting-started/installation |
14 | 14 | - theme: alt |
15 | | - text: Understand the architecture |
| 15 | + text: See how it works |
16 | 16 | link: /architecture/ |
17 | 17 | features: |
18 | | - - title: Cloud workspaces |
19 | | - details: Give teams an isolated computer with Claude Desktop and Claude Code available in the runtime. |
20 | | - - title: Enterprise controls |
21 | | - details: Apply policy, gateway holds, evidence, and operator workflows around agentic work. |
22 | | - - title: Open trust boundary |
23 | | - details: Keep identity, wallet custody, Trust Tasks, and signed approval in OpenVTC—not inside the portal. |
| 18 | + - title: A computer for each employee |
| 19 | + details: Give people an isolated cloud workspace with the AI agents and tools their work requires. |
| 20 | + - title: Clear company rules |
| 21 | + details: Decide what agents can access, what stays blocked, and which actions need a person. |
| 22 | + - title: Approval outside the application |
| 23 | + details: Use OpenVTC to keep identity, signing keys, and important decisions in a separate wallet. |
24 | 24 | --- |
25 | 25 |
|
26 | 26 | <div class="docs-home"> |
27 | | - <p class="eyebrow">Documentation · open source · enterprise runtime</p> |
28 | | - <h2>From first install to governed production work.</h2> |
| 27 | + <p class="eyebrow">Documentation · open source · built for enterprise use</p> |
| 28 | + <h2>From your first local workspace to a production deployment.</h2> |
29 | 29 | <p class="lede"> |
30 | | - ONEComputer is a thin business and enforcement layer over an open trust |
31 | | - plane. These docs explain what is real today, how to run it, and where the |
32 | | - remaining OpenVTC integration work belongs. |
| 30 | + These docs explain how to run ONEComputer, how its safeguards work, and |
| 31 | + which parts of the complete OpenVTC integration are available today. |
33 | 32 | </p> |
34 | 33 |
|
35 | 34 | <div class="doc-grid"> |
36 | 35 | <a class="doc-card" href="./getting-started/installation"> |
37 | 36 | <span>01 · Start here</span> |
38 | | - <b>Install the OSS stack</b> |
| 37 | + <b>Install ONEComputer</b> |
39 | 38 | <p>Use the one-line installer or prepare an existing checkout without losing local state.</p> |
40 | 39 | </a> |
41 | 40 | <a class="doc-card" href="./getting-started/quickstart"> |
42 | 41 | <span>02 · Build</span> |
43 | 42 | <b>Run the local quickstart</b> |
44 | | - <p>Bring up PostgreSQL, migrations, the portal, and the Rust policy gateway.</p> |
| 43 | + <p>Start the database, prepare its tables, and run the portal and policy gateway.</p> |
45 | 44 | </a> |
46 | 45 | <a class="doc-card" href="./architecture/openvtc-boundary"> |
47 | 46 | <span>03 · Trust</span> |
48 | | - <b>Read the OpenVTC boundary</b> |
| 47 | + <b>Understand OpenVTC approval</b> |
49 | 48 | <p>Understand why approval happens in an external wallet and how the signed result returns.</p> |
50 | 49 | </a> |
51 | 50 | <a class="doc-card" href="./operations/azure-deployment"> |
52 | 51 | <span>04 · Operate</span> |
53 | 52 | <b>Deploy to Azure</b> |
54 | | - <p>See the service topology, systemd units, release gates, and health checks.</p> |
| 53 | + <p>See how the services fit together, how releases are checked, and how to monitor their health.</p> |
55 | 54 | </a> |
56 | 55 | <a class="doc-card" href="./governance/policy"> |
57 | | - <span>05 · Govern</span> |
58 | | - <b>Design policy safely</b> |
59 | | - <p>Separate business policy from cryptographic authority and keep defaults explicit.</p> |
| 56 | + <span>05 · Set rules</span> |
| 57 | + <b>Design clear company policy</b> |
| 58 | + <p>Choose what is allowed, blocked, recorded, or sent to a person for review.</p> |
60 | 59 | </a> |
61 | 60 | <a class="doc-card" href="./reference/status"> |
62 | 61 | <span>06 · Reality check</span> |
63 | 62 | <b>Know the current status</b> |
64 | | - <p>Track the verified implementation, the compatibility harnesses, and the E2E gaps.</p> |
| 63 | + <p>See what works today, what is still being integrated, and how completion is verified.</p> |
65 | 64 | </a> |
66 | 65 | </div> |
67 | 66 |
|
68 | 67 | <div class="boundary-note"> |
69 | 68 | <p> |
70 | | - <strong>Security invariant:</strong> ONEComputer may display an approval |
71 | | - request and its state, but it must never be the approval authority. The |
72 | | - external OpenVTC wallet signs the exact held action; ONEComputer verifies |
73 | | - the result before release. |
| 69 | + <strong>One rule we do not compromise:</strong> ONEComputer may show an |
| 70 | + approval request, but it cannot approve that request itself. A separate |
| 71 | + OpenVTC wallet signs the manager's decision, and ONEComputer checks that |
| 72 | + decision before the action continues. |
74 | 73 | </p> |
75 | 74 | </div> |
76 | 75 | </div> |
0 commit comments