Technical Glossary

Standardized definitions for core concepts and architectural terms used across ActonOS.

---

WASMLoader

The unified plugin management subsystem in ActonOS (internal/plugin/) that handles discovery, validation, lifecycle orchestration, and hot-reloading of WebAssembly extensions for tools, chat channels, and SaaS connectors.

Wazero

The zero-dependency, 100% pure-Go WebAssembly JIT runtime embedded within actond to execute sandboxed WASI modules with memory safety and near-native performance without requiring CGO or external runtimes.

.actonpkg

The official distributable package format for ActonOS plugins—a ZIP archive bundling manifest.json, compiled plugin.wasm binary, icons, and configuration schemas.

Plugin Bridges (WasmToolBridge, WasmChannelBridge, WasmConnectorBridge)

Internal host adapter bridges that bind guest WebAssembly exports to the ActonOS ToolRegistry, ChannelManager, and Event Bus subsystems.

Hardware Abstraction Layer (HAL)

The system layer in ActonOS that detects whether the host is running directly on physical Bare-Metal hardware (x86_64 MiniPC) or inside a Docker container, transparently adapting network drivers, telemetry sensors, and sandbox executors.

Model Context Protocol (MCP)

An open standard introduced by Anthropic enabling AI models to interact securely with external tools, data sources, and servers via stdio and HTTP/SSE JSON-RPC protocols.

ReAct Loop (Reasoning + Acting)

An autonomous agent execution pattern where the LLM alternates between generating natural language reasoning thoughts and calling structured tools to observe real-world outputs before reaching a conclusion.

Swarm Orchestration

A multi-agent coordination pattern where a parent orchestrator agent decomposes a large goal into independent subtasks and delegates execution concurrently across specialized child agents using lightweight Go Goroutines.

Bubblewrap (bwrap)

An unprivileged sandboxing utility on Linux that creates lightweight isolated user, mount, PID, and network namespaces without requiring root permissions.

Cgroups v2 (Control Groups)

The Linux kernel mechanism used by ActonOS to strictly enforce maximum memory limits (e.g. 512 MB RAM), CPU bandwidth quotas, and process count ceilings on agent executions.

Hybrid Semantic Memory (RAG)

A dual-engine retrieval system combining SQLite FTS5 (for exact keyword/token matching with BM25) and dense vector embeddings (generated by local ONNX multilingual-e5-small) stored in chromem-go.

Ebbinghaus Cognitive Decay

A mathematical model (R = exp(-t / S)) applied during context retrieval to gradually decay older, unreferenced memories while keeping frequently recalled facts primed for LLM reasoning.

Embedded tsnet

The pure-Go Tailscale client embedded directly within the actond daemon, providing an encrypted WireGuard mesh connection and automatic HTTPS domain without requiring external VPN clients.

Self-Healing OTA Update

An atomic update mechanism that downloads new binaries to versioned release folders, swaps the /data/bin/actond symlink, and automatically rolls back to the previous version if a 30-second health check watchdog fails.