v2026.05 · Architecture & Product Specification

CyberOS

AI-native internal operations platform — turning will into real.

Built by CyberSkill — a 10-person Vietnam-based software consultancy. CyberOS is the AI-native operating system for the company: 22 federated modules across five phased rollouts (P0 → P4), unified by a three-layer BRAIN, a single-persona Genie / CUO backed by 10 C-level skills, six cross-cutting infrastructure pillars (AUTH · AI Gateway · MCP Gateway · OBS · GraphQL Federation · NATS), and a Vietnamese-market wedge of localised skills. Three modules shipped today (memory · skill · cuo); the rest land between M+3 and M+24.

USER natural language request AI AGENT Claude / Codex / Cursor CUO Chief Universal Officer router · orchestrator routes records SKILL portable agentic skills Rust host · Bun toolchain MEMORY audit-chained ledger .cyberos-memory/ · MMR · STH caps broker CROSS-CUTTING INFRASTRUCTURE (P0) AUTH AI GW MCP GW OBS GraphQL NATS ↑ all modules use P0 Foundation CHAT BRAIN SKILL GENIE/CUO (+ 6 infra) 7/22 P1 Productivity EMAIL PROJ TIME CRM · KB HR · REW · LEARN 15/22 P2 Operations INV ESOP 17/22 P3 SaaS-ready RES OKR 19/22 P4 DOC · PORTAL · TEN (external GA) 22/22
22
modules total
7 at P0 → 22 at P4
10
C-level personas
CEO · COO · CFO · CMO · …
3
BRAIN memory layers
FS · Vector+Graph · Archival
26+
AI clients
via Agent Skills standard
6
VN-market skills
MST · CCCD · GDT · VietQR
What is CyberOS

The substrate · the catalog · the orchestrator

CyberOS is built on three shipped modules that compose to form an AI-native operating system. Every other module in the catalog plugs into this triangle.

The catalog

All 22 modules · all 5 phases

Per, CyberOS ships as 22 modules — each owned end-to-end by one role, each independently deployable as an Apollo Federation v2 subgraph and a Module-Federation frontend remote. Click any cell to open its dedicated module page.

Phase ordering reflects the bet that internal productivity (P1) is the moat; external SaaS is P4 only.

P2 · Operations M+7 → M+9 · 2 modules · bill-to-cash + ESOP
P3 · SaaS-ready M+10 → M+12 · 2 modules · Singapore HoldCo flip
P4 · External GA M+13 → M+24 · 3 modules · first paying tenant

Module count by phase

7
P0 · M0–M3
15
P1 · M4–M6
17
P2 · M7–M9
19
P3 · M10–M12
22
P4 · M13–M24
Roadmap

The 12-month arc

Five gated phases (P0 → P4) over 24 months, anchored on dogfooding signal and compliance gates that flip every quarter. The headcount column tracks the founder's commitment: scale only when CyberOS itself absorbs the new operational load.

P0 · Foundations
M0 – M+3
P1 · Productivity
M+4 – M+6
P2 · Operations
M+7 – M+9
P3 · SaaS-ready
M+10 – M+12
P4 · External
M+13 – M+24
M0
M+3
M+6
M+9
M+12
M+18/24
P0 exit · M+3
Modules: AUTH · AI · MCP · OBS · CHAT · BRAIN · GENIE/CUO
Headcount: 10 Members
Outcome: Slack + Zalo decommissioned
7 of 22 modules ready
P1 exit · M+6
Modules: PROJ · TIME · CRM · KB · HR · EMAIL · REW (core) · LEARN
Headcount: 12 Members
Outcome: First payroll cycle through REW
15 of 22 ready
P2 exit · M+9
Modules: INV · full REW pool calc · ESOP
Headcount: 14 Members
Outcome: First SP grant issued
17 of 22 ready
P3 exit · M+12
Modules: RES · OKR live; mobile evaluated
Headcount: 16 Members
Outcome: First quarterly OKR cycle · Singapore HoldCo flip if ARR ≥ $1.5M
19 of 22 ready
P4 entry · M+18
Modules: DOC (eIDAS QTSP) · PORTAL · TEN
Headcount: 20 Members
Outcome: First external paying tenant
22 of 22 ready
Full milestone details
The C-suite

CUO is one persona — ten specialists behind it

CUO presents as one Genie. Internally, ten C-level skills load on demand via the open Anthropic Agent Skills format. The user sees Genie; Genie routes to whichever skill best fits the request. Same BRAIN, same persona-version stamp, same audit chain. Click any role to jump to its detail on the CUO page.

+ 4 emerging 2026 sub-personas: CAIO, CXO, CRO, CSO-Sustainability. See CUO page →

Compliance scope

Three concentric compliance rings

CyberOS plans for three jurisdictional concentric rings simultaneously. The inner ring (Vietnam) is the cornerstone — every CyberOS deployment respects it. The middle ring (cross-border) adds GDPR + Singapore PDPA when Singapore HoldCo flips at P3. The outer ring (international standards) lights up gate-by-gate.

Standards · ISO + SOC + CSA ISO 27001:2022 · ISO 42001 · ISO 27701 · SOC 2 · CSA STAR L1→L2 Cross-border GDPR · EU AI Act Annex III §4 · Singapore PDPA Vietnam — Home Regime PDPL Law 91/2025 · Decree 356 Decree 13/2023 (Personal Data) Decree 53/2022 (Cyber Security) Decree 20/2026 (SME) ⌖ P3 exit: ISO 42001 AIMS ⌖ P2 exit: ISO 27001:2022 ⌖ P1 exit: SOC 2 Type I + CSA STAR L1 ⌖ P2 exit: EU AI Act Annex III §4 ⌖ P3+: Singapore PDPA (HoldCo flip) ⌖ P3+: GDPR (EU tenant residency) ⌖ P0 exit: A05 DPIA + DPO + Trust Center
Tech stack

The stack, top to bottom

Every layer locked in + Part 14. The bias is toward open-source, self-hostable, audit-able primitives — never lock CyberOS to a vendor that could later compromise the company's Vietnamese data sovereignty.

flowchart TB subgraph T1 ["Persona / Agent layer"] PERSONA["LangGraph supervisor
+ LiteLLM router
+ Anthropic Skills format (10 C-level skills)"] end subgraph T2 ["Frontend layer"] HOST["Host shell · Vite + React 19 + Tauri"] REMOTES["Module remotes · Webpack 5 + Module Federation"] end subgraph T3 ["API / agent surface layer"] APOLLO["Apollo Router · GraphQL Federation v2.5+"] MCPGW["MCP Gateway · 2025-11-25 spec"] AIGW["AI Gateway · LiteLLM"] end subgraph T4 ["Backend services layer"] SUBGRAPHS["Per-module subgraphs · TypeScript or Rust"] end subgraph T5 ["Data layer"] PG["PostgreSQL 17 + pgvector HNSW + Apache AGE 1.5"] EMBED["BGE-M3 embedder + BGE-rerank-v2-m3"] end subgraph T6 ["Infrastructure layer"] NATS_T["NATS JetStream"] S3["S3 / R2 / MinIO"] end T1 --> T2 --> T3 --> T4 --> T5 T4 --> T6 %% Brand-aligned palette per design-system DESIGN.md Part 21 — Umber + Ochre only. classDef agent fill:#f9c64f,stroke:#45210e,stroke-width:2px,color:#45210e classDef fe fill:#f5ede6,stroke:#45210e,stroke-width:1.5px,color:#2a1208 classDef gw fill:#fef6e0,stroke:#9c750a,stroke-width:2px,color:#45210e classDef be fill:#e8d4c2,stroke:#45210e,stroke-width:1.5px,color:#2a1208 classDef data fill:#cba88a,stroke:#2a1208,stroke-width:1.5px,color:#110703 classDef infra fill:#fde7b3,stroke:#9c750a,stroke-width:1.5px,color:#45210e class PERSONA agent class HOST,REMOTES fe class APOLLO,MCPGW,AIGW gw class SUBGRAPHS be class PG,EMBED data class NATS_T,S3 infra
Why each choice — full table