AISOS
02 · Kernel
Model Endpoints
Model abstraction layer
| Endpoint | Routing | Vendor / region | Digest | Ceiling | Cost / 1k | Attestation |
|---|---|---|---|---|---|---|
| aisos/kernel-reasoning | live · openai/gpt-6-astra | gateway-openai · us-east | a3f0e71c | C1 INTERNAL | $0.0100 | attested |
| aisos/kernel-enterprise | live · openai/gpt-6-astra | gateway-openai-zdr · us-east | e5d1a0f7 | C2 CONFIDENTIAL | $0.0150 | attested |
| aisos/kernel-fast | live · google/gemini-3.8-flash | gateway-google · us-east | c8b45d92 | C1 INTERNAL | $0.0009 | attested |
| aisos/kernel-frontier | deterministic synthesis | frontier-cloud · eu-west | 9f21c4ab | C2 CONFIDENTIAL | $0.0120 | attested |
| aisos/kernel-balanced | deterministic synthesis | frontier-cloud · us-east | 4c7e19d0 | C1 INTERNAL | $0.0040 | attested |
| aisos/kernel-local | deterministic synthesis | self-hosted · eu-west | b1d8f602 | C3 RESTRICTED | $0.0006 | attested |
| aisos/kernel-legacy | deterministic synthesis | partner-cloud · ap-south | 77aa10be | C1 INTERNAL | $0.0030 | refused · circuit-open |
Endpoint selection is a policy decision, not a code decision. The kernel resolves a registry id to an attested upstream server-side; an unattested or circuit-open endpoint never receives a prompt, and a completion returning from any endpoint re-enters as untrusted input through the output firewall.
Tool plane
- tool.searchreadrequires I0sandbox no-egressCorpus search within a declared scope.
- tool.transfer_fundsfinancialrequires I2sandbox attested-onlyMoves money. Argument-bound capability required.
- tool.email_sendmessagingrequires I2sandbox egress-allowlistSends outbound mail.
- tool.exec_shellexecutionrequires I3sandbox deniedDenied in this tenant.