Towards an Agent Operating System - Lessons from Classical and Cloud OS
On the map: LLM agents and tool use → Software engineering coding agents
Abstract (arXiv)
Every major wave of platform software follows the same arc: an initial period of experimentation with competing frameworks and ad-hoc implementations, followed by the articulation of a small set of stable abstractions with well-defined semantics, and finally consolidation around those abstractions into a platform that applications can portably target. POSIX did this for classical operating systems; Kubernetes did it for the cloud. Agentic AI systems - autonomous, LLM-driven agents that plan, use tools, maintain memory, and collaborate - are currently in the experimentation phase of the third such wave. dozens of frameworks and protocols have emerged, but no community consensus exists on what the core abstractions are or what guarantees they carry. Without that consensus, agentic applications cannot be written portably, platforms cannot compose reliably, and the field cannot advance beyond prototype deployments. We argue that the path forward is to follow the prior-wave methodology: derive new agentic abstractions by extending classical OS and cloud OS primitives to stochastic, natural-language-mediated execution, specify their semantics precisely, and consolidate around them - just as POSIX and Kubernetes consolidated their respective waves.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Software engineering coding agents, one of 16 directions in LLM agents and tool use. Builds on 34 of its 61 references that are in the map. First posted on arXiv 27 Jul 2026.
Builds on
34 of 61 references.
Closest ancestors · 10
Same direction, newest first
- 2026AI Harness Engineering: A Runtime Substrate for Foundation-Model Software Agents13 May
- 2026Crab: A Semantics-Aware Checkpoint/Restore Runtime for Agent Sandboxes30 Apr
- 2026Quine: Realizing LLM Agents as Native POSIX Processes8 Mar
- 2026Building Effective AI Coding Agents for the Terminal: Scaffolding, Harness, Context Engineering, and Lessons Learned5 Mar
- 2026AgentCgroup: Understanding and Controlling OS Resources of AI Agents10 Feb
- 2026ReliabilityBench: Evaluating LLM Agent Reliability Under Production-Like Stress Conditions3 Jan
- 2025Where LLM Agents Fail and How They can Learn From Failures29 Sep
- 2025AgentCompass: Towards Reliable Evaluation of Agentic Workflows in Production18 Sep
- 2025Why Do Multi-Agent LLM Systems Fail?17 Mar
- 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation16 Aug
Other references · 24
- 2023MemGPT: Towards LLMs as Operating Systemscited by 1,295
- 2023Large Language Models Cannot Self-Correct Reasoning Yetcited by 965
- 2024Frontier Models are Capable of In-context Schemingcited by 252
- 2025AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agentscited by 196
- 2025Memory OS of AI Agentcited by 140
- 2024AIOS: LLM Agent Operating Systemcited by 94
- 2024We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMscited by 61
- 2025SagaLLM: Context Management, Validation, and Transaction Guarantees for Multi-Agent LLM Planningcited by 58
- 2026EverMemOS: A Self-Organizing Memory Operating System for Structured Long-Horizon Reasoningcited by 52
- 2026Taming Various Privilege Escalation in LLM-Based Agent Systems: A Mandatory Access Control Frameworkcited by 50
- 2025Human-Written vs. AI-Generated Code: A Large-Scale Study of Defects, Vulnerabilities, and Complexitycited by 16
- 2026AI Agent Systems: Architectures, Applications, and Evaluationcited by 13
12 more
- 2026AgenTRIM: Tool Risk Mitigation for Agentic AIcited by 9
- 2026InfiAgent: An Infinite-Horizon Framework for General-Purpose Autonomous Agentscited by 8
- 2026Verify Before You Commit: Towards Faithful Reasoning in LLM Agents via Self-Auditingcited by 7
- 2026AC4A: Access Control for Agentscited by 5
- 2026ClawVM: Harness-Managed Virtual Memory for Stateful Tool-Using LLM Agentscited by 4
- 2026Options, Not Clicks: Lattice Refinement for Consent-Driven MCP Authorizationcited by 4
- 2025Uncertainty-Aware, Risk-Adaptive Access Control for Agentic Systems using an LLM-Judged TBAC Modelcited by 3
- 2026AgentOS: From Application Silos to a Natural Language-Driven Data Ecosystemcited by 3
- 2025Deontic Temporal Logic for Formal Verification of AI Ethicscited by 2
- 2025Can LLMs Detect Their Own Hallucinations?cited by 1
- 2026I must delete the evidence: AI Agents Explicitly Cover up Fraud and Violent Crimecited by 1
- 2026Context Kubernetes: Declarative Orchestration of Enterprise Knowledge for Agentic AI Systemscited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Agent Operating Systems (AOS): Integrating Agentic Control Planes into, and Beyond, Traditional Operating Systems
- 2026The Agent Operating System (AOS): A Reference Operating Architecture for Distributed Agentic Systems
- 2026From Everything-is-a-File to Files-Are-All-You-Need: How Unix Philosophy Informs the Design of Agentic AI Systems
- 2023LLM as OS, Agents as Apps: Envisioning AIOS, Agents and the AIOS-Agent Ecosystem
- 2025OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use
- 2026Toward Securing AI Agents Like Operating Systems
- 2025Towards Agentic OS: An LLM Agent Framework for Linux Schedulers
- 2025Governed By Agents: A Survey On The Role Of Agentic AI In Future Computing Environments