Skip to main content
Glama

Ketan-OS πŸͺ” (ΰ€•ΰ₯‡ΰ€€ΰ€¨)

The Transactional Runtime for AI Agents

License: MIT Python Version Tests

MCP ketan-os MCP server M8ven Score


πŸ”± Origin & Philosophy

"Aham ātmā guḍākeΕ›a sarva-bhΕ«tāśaya-sthitaαΈ₯"
β€” Bhagavad Gita, Chapter 10, Verse 20

"I am the Self, O Gudakesha, seated in the hearts of all beings.
I am the beginning, the middle, and the end of all beings."

Ketan (ΰ€•ΰ₯‡ΰ€€ΰ€¨) literally means Banner, Beacon, or Dwelling in Sanskrit β€” the fixed, unmovable point of reference from which all navigation begins.

AI agents perform complex, multi-step actions across files, commands, and external tools β€” but they lack transaction semantics. When an agent writes a malformed file, executes a destructive shell command, or acts on stale assumptions, standard agent frameworks have no rollback mechanism.

Ketan-OS provides the transactional substrate for AI agents:

BEGIN  β†’  WAL JOURNAL  β†’  VERIFY  β†’  SANDBOX EXEC  β†’  COMMIT / ROLLBACK / COMPENSATE

By wrapping tool execution in content-addressed state snapshotting, durable WAL journal persistence, container sandbox isolation, pre-flight assertion guards, causal execution provenance, and prompt contradiction pruning, Ketan-OS makes agent tool execution safe, reversible, and debuggable.


Related MCP server: uacos

🌟 Core Architectural Subsystems

Subsystem

Component

What Ketan-OS Does

1. Transactional Workspace Recovery

KetanShadowFS

Takes incremental, content-addressed workspace snapshots using SHA-256 blob deduplication (blobs/<sha256>). Reverts tracked regular workspace files to clean checkpoints.

2. Durable Write-Ahead Journal (WAL)

TransactionJournal

Synchronously appends transaction events (TX_BEGIN, TX_COMMIT, TX_ROLLBACK) to .ketan/journal.jsonl on disk so transactions survive process crashes & SIGKILL.

3. Execution Sandbox Engines

LocalProcessSandbox & DockerContainerSandbox

Provides isolated tool execution backends. Enforces strict canonical path confinement locally or runs commands in isolated Docker containers.

4. System Compensation Drivers

GitCompensationDriver & SQLCompensationDriver

Executes registered inverse operations (git revert, inverse SQL DELETE queries) to compensate non-filesystem mutations during rollback.

5. Multi-Layer Pre-Flight Guards

InvariantVerifier

Enforces strict workspace canonical path isolation (is_relative_to(workspace_root)), blocks symlink traversal escapes, checks Python AST syntax, and filters destructive shell patterns.

6. Causal Execution Provenance DAG

KetanTraceGraph

Records tool calls, checkpoints, failures, and rollbacks into a directed acyclic graph (DAG). On failure, automatically traverses the DAG backwards to explain the execution lineage.

7. State Belief & Fact Store

EpistemicBeliefEngine

Tracks factual assertions about workspace state. Uses type coercion (_values_are_equivalent) to prevent false positives and auto-prunes contradicted prompt assumptions.


πŸ›‘οΈ Side-Effect Reversibility Matrix

Ketan-OS tracks tool operations across three distinct transaction recovery tiers:

System / Target

Reversibility Tier

Recovery Strategy

Local Workspace Files

REVERSIBLE

Automatic content-addressed state rollback via KetanShadowFS

Git Repositories

REVERSIBLE

Automated workspace restore / branch checkpoint reversion

PostgreSQL / SQL Databases

COMPENSATABLE

Inverse transaction query or registered compensation handler

S3 / Blob Storage

COMPENSATABLE

Object versioning rollback or compensation handler

GitHub / AWS / Infrastructure

COMPENSATABLE

Registered API inverse call (e.g. close issue, delete resource)

External Network APIs / Email

IRREVERSIBLE

Pre-execution policy check & counterfactual failure hint


πŸ“œ Formal Ketan-OS Transaction Protocol Specification

Ketan-OS formally defines the execution boundary around agent actions across four authoritative layers:

Component Layer

Persistent Storage

Role & Guarantee

Write-Ahead Log (WAL)

.ketan/journal.jsonl

Authoritative Transaction State Log β€” Synchronous fsync() record of all BEGIN, EFFECT, COMMIT, ROLLBACK, and RECOVERED events.

Dual-Ledger Index

.ketan/ledger.jsonl

Checkpoint Index & Turn History β€” $O(1)$ append-only index mapping state_root_hash, prompt stacks, and tool call records across steps.

Workspace State Engine

.ketan/snapshots/<id>/manifest.json + .ketan/blobs/

Content-Addressed State Store β€” Incremental workspace snapshots with JSON manifests and deduplicated file blobs.

Effect Contract Engine

Effect(pre, action, post, inverse)

Observable System Mutation Contract β€” Captures preconditions, postconditions, and compensation conflict detection.

              AGENT TRANSACTION LIFECYCLE
                         β”‚
                         β–Ό
        β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
        β”‚  WAL Journal (.ketan/journal)   β”‚
        β”‚  TX_BEGIN β†’ TX_EFFECT β†’ COMMIT   β”‚
        β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
                         β”‚
        β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”΄β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
        β”‚  Dual-Ledger (.ketan/ledger)    β”‚
        β”‚  Hash-Chained State Commitment   β”‚
        β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
                         β”‚
        β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”΄β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
        β”‚  ShadowFS (.ketan/snapshots)    β”‚
        β”‚  Manifest & Blob Storage         β”‚
        β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
                         β”‚
        β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”΄β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
        β”‚  Effect Contract Engine          β”‚
        β”‚  Pre/Postcondition Verification  β”‚
        β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜

πŸ—οΈ System Architecture

graph TD
    subgraph AgentLayer [" πŸ€– Agent Execution Layer "]
        LLM["LLM Agent Loop
        OpenAI β€’ Claude β€’ LangGraph β€’ AutoGen"]
        MCP["πŸ”Œ FastMCP Server
        Claude Code Integration"]
        Wrapper["πŸ›‘οΈ KetanAgentWrapper
        Tool Call Interceptor"]
        LLM -->|Tool Call| Wrapper
        MCP -->|Safe Tool Execution| Wrapper
    end

    subgraph CoreEngine [" πŸͺ” Ketan-OS Transactional Substrate "]
        Harness["πŸͺ” KetanHarness
        Thread-Safe Coordinator"]

        subgraph WALJournal [" Durable WAL Journal "]
            Journal["πŸ“ TransactionJournal
            .ketan/journal.jsonl Persistence"]
        end

        subgraph PreFlight [" Pre-Flight Guard Layer "]
            Verifier["πŸ›‘οΈ InvariantVerifier
            Canonical Path Confinement
            Symlink Guard + AST & Safety Rules"]
        end

        subgraph Sandboxes [" Execution Sandbox Engines "]
            Sandbox["πŸ“¦ Local / Docker Sandbox Engine
            Path Confinement & Container Isolation"]
        end

        subgraph StorageLedger [" Dual-Ledger Substrate "]
            Ledger["πŸ“‹ KetanLedger
            Checkpoint & Reversibility Registry"]
            ShadowFS["πŸ’Ύ KetanShadowFS
            Content-Addressed Workspace Recovery"]
            Ledger --> ShadowFS
        end

        subgraph Cognition [" State Belief Layer "]
            Epistemic["🧠 EpistemicBeliefEngine
            Runtime Fact Store &
            Prompt Contradiction Pruning"]
        end

        subgraph CTGSubsystem [" Causal Provenance Engine "]
            CTG["🧬 KetanTraceGraph
            Causal Execution Provenance DAG"]
            RCA["πŸ” Provenance Analyzer
            Execution Lineage Explanation"]
            CTG --> RCA
        end

        subgraph TimeTravel [" Transaction Recovery & Compensation "]
            Rollback["⏱️ Rollback Controller
            Workspace State Reversion"]
            CompDrivers["πŸ”„ System Compensation Drivers
            Git & SQL Inverse Actions"]
            Counterfactual["πŸ’‘ Counterfactual Engine
            Diagnostic Hint Injector"]
            Rollback --> CompDrivers
            CompDrivers --> Counterfactual
        end
    end

    Wrapper -->|"β‘  Intercept"| Harness
    Harness -->|"β‘‘ WAL Record TX_BEGIN"| Journal
    Journal -->|"β‘’ Pre-flight"| Verifier
    Verifier -->|"β‘£ Pre-Flight Pass"| Epistemic
    Epistemic -->|"β‘€ Checkpoint"| ShadowFS
    ShadowFS -->|"β‘₯ Sandbox Exec"| Sandbox
    Sandbox -->|"⑦ Execute Tool"| Execution["βš™οΈ Tool Execution"]

    Verifier -.->|Path / Syntax / Safety Fail| Rollback
    Execution -->|Crash / Exception| Rollback

    Execution -->|Success| Commit["🟒 WAL Commit & Record"]
    Commit --> CTG
    Commit --> Ledger

    Rollback -->|"β‘§ Revert Workspace"| ShadowFS
    Rollback -->|"⑨ Execute Compensations"| CompDrivers
    Rollback -->|"β‘© Record Failure Node"| CTG
    Counterfactual -->|"β‘ͺ Inject Hint"| LLM

    classDef agent    fill:#f3e8ff,stroke:#7c3aed,stroke-width:2px,color:#1e1b4b
    classDef core     fill:#e0f2fe,stroke:#0284c7,stroke-width:2px,color:#0c4a6e
    classDef storage  fill:#d1fae5,stroke:#059669,stroke-width:2px,color:#064e3b
    classDef rollback fill:#ffe4e6,stroke:#e11d48,stroke-width:2px,color:#881337
    classDef ctg      fill:#fef3c7,stroke:#d97706,stroke-width:2px,color:#78350f
    classDef exec     fill:#f0fdf4,stroke:#16a34a,stroke-width:2px,color:#14532d

    class LLM,Wrapper,MCP agent
    class Harness,Verifier,Epistemic,Journal,Sandbox core
    class Ledger,ShadowFS storage
    class Rollback,CompDrivers,Counterfactual rollback
    class CTG,RCA ctg
    class Execution,Commit exec

⚑ Quickstart

from ketan import KetanHarness, KetanAgentWrapper

# 1. Initialize Ketan-OS for your project workspace
harness = KetanHarness(workspace_dir="./my_project")
wrapper = KetanAgentWrapper(harness)

# 2. Wrap any tool with transactional protection
def write_code(args):
    with open(args["filepath"], "w") as f:
        f.write(args["content"])
    return "File written"

safe_write = wrapper.wrap_tool("write_file", write_code)

# 3. Execute β€” Ketan-OS handles snapshot, pre-flight, rollback automatically
result = safe_write(
    tool_args={"filepath": "main.py", "content": "def run():\n    return 42\n"},
    prompt_stack=[{"role": "user", "content": "Create main function"}]
)
print(result)
# β†’ {"success": True, "result": "File written", "hint": ""}
# If content had a syntax error β†’ {"success": False, "hint": "Fix SyntaxError on line 1..."}
# β†’ workspace auto-rolled back cleanly

πŸ”Œ Claude Code FastMCP Integration

Ketan-OS ships a ready-to-use FastMCP server that gives Claude Code native tools for safe, transactional, auditable agentic coding.

1. Install

git clone https://github.com/umang-algo/ketan-os.git
cd ketan-os
uv pip install -e .

2. Configure Claude Code

Add to ~/.claude/claude.json:

{
  "mcpServers": {
    "ketan-os": {
      "command": "python",
      "args": ["-m", "ketan.mcp.server", "--workspace", "/absolute/path/to/your/project"]
    }
  }
}

πŸ§ͺ Running Tests & Benchmarks

# Run unit test suite
uv run pytest tests/

# Run performance benchmark suite
uv run python examples/benchmark_ketan_performance.py

πŸ“œ License

MIT License. Copyright (c) 2026 umang-algo.

Install Server
A
license - permissive license
A
quality
B
maintenance

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Related MCP Servers

  • A
    license
    Not graded
    quality
    B
    maintenance
    Local-first code intelligence and safety layer for AI coding agents. MCP server exposes dependency graph, impact analysis, and AST-compressed repo context, backed by typed local memory, patch-scope safety gates, and git-independent transaction rollback.
    1
    MIT
  • F
    license
    B
    quality
    C
    maintenance
    MCP server for file checkpointing and undo, enabling AI agents to safely read, write, and edit files with full snapshot history and revert capabilities.
    10
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI agents to securely call MCP tools with risk scoring, checkpoints, rollback, and approval workflows.
    134
    MIT

View all related MCP servers

Related MCP Connectors

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/umang-algo/ketan-os'

If you have feedback or need assistance with the MCP directory API, please join our Discord server