Brilliant. Slightly chaotic.
Fully contained.
Give an AI agent your filesystem, your browser, and 150+ models, and you've built either a superpower or a disaster. The difference is what's underneath.
Cosmic Duck runs on Metatron — a Ring-0 macOS kernel extension that draws the boundary of what any agent is allowed to touch. Every tool call, network request, and file write passes through it first. Prompt injections don't escape the sandbox. Runaway agents don't touch your keychain.
The Duck gets to be brilliant because something else is paranoid on its behalf.