Coconut OS is the lab's largest bet: a Linux distribution built on the position that agents should be kernel primitives, not processes with extra steps. Today an agent on Linux is indistinguishable from any other process, so everything about it lives in userland convention: what it may touch, what it did, who let it. We think the kernel should know.
The work so far is specification and prototype, and we publish the posture honestly: a capability subsystem with explicit tokens for agent operations, an audit path that records what agents did at the kernel boundary rather than trusting them to report it, and scheduling that knows an agent workload from an interactive one. The reserved syscall surface is small on purpose, and most of it is deliberately unwired until the design survives review.
Same lab, same method as KVWarden and mlxd: state the thesis, build the smallest honest version, measure, publish what happened. The landing page lives at coconutos.org, and like every domain we run, it is one surface of one lab.