Search papers, labs, and topics across Lattice.
This paper introduces the concept of an Agent Operating System (AOS), designed to accommodate the unique execution characteristics of agentic AI systems that operate probabilistically and adaptively. By analyzing the limitations of traditional operating systems, the authors propose a structured architecture that integrates agentic control planes into existing OS frameworks, addressing challenges in scheduling, memory management, and security. Key findings highlight the need for new evaluation criteria that ensure determinism, auditability, and comprehensibility in managing agent workloads while maintaining the foundational integrity of current operating systems.
Traditional operating systems struggle to support the dynamic and adaptive nature of agentic AI, necessitating a new architecture that can ensure security and accountability at scale.
Traditional operating systems were designed around deterministic programs, explicit control flow, and human initiated workflows. Their core abstractions processes, threads, system calls, files, and permissions assume bounded behavior and predictable interaction patterns. Agentic AI systems introduce a different execution model: long-lived, goal-directed entities that reason probabilistically, invoke tools dynamically, and adapt behavior based on feedback. While agents can be implemented as user-space applications today, their execution characteristics stress OS boundaries in scheduling, memory and state management, security, observability, and governance. This paper introduces the concept of an Agent Operating System (AOS), a systems architecture that integrates an agentic control plane into existing operating systems or, in some models, subsumes selected OS responsibilities over time. We provide a precise definition of an AOS, explicit assumptions and non-goals, and a structured decomposition of AOS responsibilities into schedulers, context and memory management, tool and capability registries, policy and trust enforcement, and observability and audit. We analyze limitations of classical OS abstractions for agent workloads, propose integration models from user-space runtimes to distributed control planes, and map AOS concepts onto Linux and Windows primitives. We present security and safety implications, including agent specific threat models, and define evaluation criteria that emphasize deterministic enforcement, auditability, and operator comprehensibility. The objective is not to replace operating systems wholesale, but to establish a rigorous systems foundation for agentic computation that remains controllable, accountable, and secure at scale.
