RING3

RING3 is a small operating-system kernel, written from scratch in C during the hackathon, that lets an AI agent operate a real physical device without giving it free rein. AI agents are starting to control computers and machines with all of their user’s permissions. RING3 flips that: Meta’s Muse Spark proposes one action at a time, a user-mode executor carries it out, and the kernel decides every action. Permissions are fixed when the agent starts; anything risky needs a human “y” at the keyboard; reading untrusted text “taints” the agent, so every later move needs approval; and physical limits (range, ramp rate, a presence interlock that stops the fan when something is in front of the sensor, an E-stop only a human can clear) are re-checked every 10 ms, below the model. It drives a real Arduino work cell (fan, gauge, distance sensor, E-stop). Every decision is logged in a hash chain and can be replayed without an API key. Results from recorded runs: 12 over-reaching tasks with 0 actions beyond policy, and 0 kernel panics across 40 faulty-program runs, 10,000 random system calls and 30,000 malformed frames.