GrokLink OS
Living research hub for a from-scratch multi-radio RTOS - safety-gated agent, hot-load skills, hash-chained vault, PC bridge.
GrokLink OS is a complete research operating system - kernel, HAL, drivers, services, GUI, and safety path owned end-to-end. It is not an overlay or patch on Flipper Zero / Momentum / Unleashed firmware. A PC bridge (groklink-os) talks JSON-line GrokRPC over USB CDC for status, passive RX, skill craft, and human-gated control. This site is an educational console: demos run in your browser only and never transmit RF.
Click a layer for status and a short accurate brief. Stack matches the native OS docs - not a Flipper runtime.
Visceral default-deny. Pick an action class, set gates, try an action. This is a browser mock of glk_policy_check - it does not talk to hardware.
Gates mirror docs/SAFETY.md: edu phrase, confirm TTL, blacklists, duty/rate limits, non-bypassable spectrum planner circuit breaker, append-only audit.
Mission runner (passive only)
Unplugged arm in this hub logs passive steps to a browser vault mock. On device: prepare-unplugged or SAFETY hold OK; still no auto-TX.
Vault hash-chain demo
Educational FNV-1a style chain in localStorage (integrity spirit of storage docs - not a crypto claim, not the device vault).
1.
v3.9.1 is host/CI honesty: GLKFS CRC, streaming append, honest SD probe, BLE tick no-op, PC bridge skips USB banners. Device DFU is not recut.
Architecture principles
Safety by construction; determinism under load; constrained autonomy; audit everything; modular skills; honest silicon. Primary MCU STM32WB55 (M4 app + M0+ network). Host-sim is first-class.
Safety model
Education phrase I_WILL_USE_ONLY_AUTHORIZED_TARGETS. Default-deny for TX, GPIO, contact, system. Confirm tokens TTL single-use action-scoped. Blacklists fail closed. Duty + spectrum circuit breaker non-bypassable. Append-only hash-chained audit.
Unplugged autonomy
PC/LLM needs USB. On-device GrokAgent can passive-explore after prepare-unplugged or SAFETY hold OK. No agent TX without human confirm. Plug-sync on reconnect. v3.8 durable vault when storage ok.
Storage and vault (v3.9 Field Card)
Crash-safe layout under /groklink: config, missions, skills, logs, blacklist, vault, state. Modes: absent / ok / degraded / corrupt / full / readonly. Vault: RAM ring + durable append; chain.meta root; optional operator seal.
Skills hot-load
skills/id/manifest.json risk_class passive_rx | active_tx | gpio | contact | system. ROM catalog always available. Optional GLKSIG1 package verify when feature enabled. Craft loop: capture -> human review -> SD -> rescan.
Multi-LLM signal observability
Bridge observe tools are strictly passive: edu_ack, status, subghz probe/rx, spectrum. Never TX or third-party decode. Schema v2; local tools HTTP optional :8741. Lab codec GLK1 is owned-lab education only.
Hardware snapshot
CC1101 SubGHz (bit-banged SPI_R, VERSION 0x14), IR, NFC, GPIO, iButton, BLE wrappers. ST7567 pages HOME / RADIO / SAFETY / STORAGE / ABOUT. USB app 0483:5740; DFU 0483:DF11.
Full source docs
Canonical markdown lives in the repo: ARCHITECTURE, SAFETY, UNPLUGGED_AUTONOMY, STORAGE, SKILLS, SIGNAL_OBSERVABILITY, MEDSEC_*, DFU, BUILD. Browse docs on GitHub.
Crystal-clear scope
- Not a medical device. Never for diagnosis, treatment, care monitoring, or patient-connected use.
- Passive-only packs and profiles for authorized facility / lab research under written Rules of Engagement.
- Profile
medsec-strictforbids all TX. - No clinical claims. No PHI workflows on this marketing site.
Operator path (device)
groklink-os edu-ack groklink-os lab medsec-demo groklink-os lab engagement-init --operator lab-op1 --engagement ENG-001 --site bench --roe-ack groklink-os lab casefile --dir cases/ENG-001 --title "passive baseline" --hypothesis "quiet ISM"
See repo docs: HEALTHCARE_OPERATOR_RUNBOOK, MEDSEC_ROE_TEMPLATE, MEDSEC_RISK_FILE.
For authorized research, education, and equipment you own (or are explicitly authorized to operate on). Unauthorized access to RF / IR / RFID / NFC / access-control systems may be a crime. Authors accept no liability for misuse. Not a medical device. Interactive demos on this site are educational browser simulations only.