Aid-On is a small company in Miyazaki, Japan. We work on one thing: the boundary of the permissions a person hands to an AI. Our main product, teastia, is written in Almide, our own language, the one an LLM writes most accurately. It reads the source of an AI business application without running it and decides whether the application may go to production, judged against WASI capability-based security.
The ground is WebAssembly and WASI. Enforcement is left to Wasmtime and the OS kernel.
A permission you did not grant cannot be exercised.
Hand over only the data and the operations that are needed. Stop anything beyond that. Take the permission back when you have to. Putting that between people and AI is what Aid-On does.
- Website - https://aid-on.org/
- Articles - https://aid-on.org/module
- Contact - info@aid-on.org
- teastia - pre-production review for AI business applications (in preparation)
- Text Smash - read a long document by its key points, beside the original
- Fact Judge - break a text into claims and check each one against sources
- Spider5000 - a map that grows outward from one central question
For teastia, please reach us at info@aid-on.org.
A statically typed language built so an LLM writes it accurately. It compiles to Rust and WebAssembly, and is developed by Aid-On.
- almide - the compiler
- als - the language specification, its conformance corpus, and the judge that runs it against any almide binary
- playground - write and run
.almdin the browser - vscode-almide / tree-sitter-almide - editor support
- almide-grammar - the single source of truth for the grammar
- parsegen - a tree-sitter compatible parser generator that reads grammar.json, with no C and running in WASM
- the parser side is to hand over to gramide, written in Almide, in time
- almide-agents - an AGENTS.md that teaches a coding agent to write Almide correctly
- Organization - https://github.com/almide
A sandbox that runs an agent with the permissions you actually granted it. The limits are enforced by the OS kernel rather than by a wrapper or a prompt: Seatbelt on macOS, Landlock and seccomp on Linux. A restriction the kernel cannot express refuses the run instead of weakening it.
The rest is in Repositories. Each repository carries its own LICENSE.