Ox acts as an intelligent proxy between you and the internet. It uses websites and apps on your behalf, freeing you from attention-hungry interfaces and slow legacy services. As it works, it can turn what it learns into reusable actions (basically function calls), making future interactions deterministic and way faster.
Most service integrations today are still built ahead of time: someone writes an API integration, connector, MCP server, or browser automation and then maintains it as the service changes.
But the internet is becoming more dynamic so have our agents.
With Ox, instead of waiting for a connector, you can say something like:
“Connect to <service>.”
Ox can study a website or workflow through capabilities it already has, turn what it learns into typed actions and reusable skills, validate them, and make them available immediately.
That pushed me toward local agents.
A local agent operates from your own device, network, and existing authenticated browser sessions instead of relying on shared datacenter infrastructure. This also makes it less likely to hit blocks aimed at datacenter IPs or centralized browser automation.
The model doesn’t need your passwords, cookies, or session tokens. Authentication and browser state are owned by the Host, while the agent interacts through explicit actions that could be gated.
Ox is completely free and open source. You can use any model provider, including local or self-hosted models, while keeping your agent’s data on device. As local models improve, I think this architecture becomes increasingly useful because the agent can become more capable without requiring more of your data to leave your device.
The security model is also a big part of the design. Ox asks before taking sensitive actions, keeps credentials isolated from the model, limits what agent code can access, and lets you stop execution at any time.
Underneath the app is OpenOx, an open protocol for self-evolving agents. It separates the interface, agent, model provider, persistent state, execution environment, and external capabilities.
The agent can run JavaScript inside a capability-limited VM. The VM has no direct network access, Host filesystem access, shell, Node.js, or DOM. Anything outside the VM has to go through an explicit ox.* capability exposed by the Host. Services provide typed actions for websites, device capabilities, or MCP servers. Skills provide reusable instructions for combining those actions. New services and skills can be attached at runtime without waiting for a new version of the app.
They can remain local or be recorded in Git and shared through repositories, so each Ox can evolve independently while benefiting from capabilities learned by others.
The agent’s persistent state lives in a portable Ox Profile containing its identity, memory, skills, artifacts, and conversations. The goal is for that state to stay independent of any particular interface, including Ox itself, or model provider. File over app.
The first implementation is an iOS app. It’s available on the App Store, and the whole thing is open source:
https://github.com/ziyzhu/openox
If you’re interested in the broader motivation behind the project, I wrote about it here:
https://ziyzhu.com/a-technology-for-free-will
This is still early. I’m especially interested in feedback on the security model and self-evolution.
I built Ox from scratch but many aspects of the project were heavily inspired by Pi/OpenClaw and the idea of malleable software. Ox’s core agent loop on iOS is pretty much a Swift rewrite o","source_kind":"rss","canonical_source_url":""}],"modelAnswers":[],"modelInsight":{"common_points":[],"disagreements":[],"evidence_refs":[]},"entities":[],"modelStats":[],"topicAssets":[],"relatedTopics":[{"id":"716acce4-331a-428c-be53-86ef162d7837","title":"假牙粘附剂有股松油味","category":"AI与科技","heat_score":73,"discussion_volume":14,"summary":"假牙粘附剂有松油味或异味，主要是因为部分“天然”品牌使用松香树脂作为粘合基底，带来浓郁松木气味；同时也可能源于配方中的樟脑、薄荷等抑菌剂，或酒精溶剂的挥发。此外，若保存不当导致管口细菌滋生，也会产生严重的腐败异味。","updated_at":"2026-10-21 07:40:18"},{"id":"7acb0c81-6aee-4165-b80c-4968d199d0ab","title":"茶船古道茉莉六堡茶茶饮","category":"AI与科技","heat_score":71,"discussion_volume":8,"summary":"识别品牌为'茶船古道'，产品为500mL无糖茉莉六堡茶，由广西华林食品受托生产。该饮品主打0糖0脂0卡，融合传统六堡茶底与现代健康理念。其市场定位覆盖追求健康的年轻群体及肠胃调理人群，参照无糖茶饮市场，预估售价在5-8元区间。","updated_at":"2026-10-21 19:05:57"},{"id":"f375d21f-57c2-4780-982e-98068eb04bf0","title":"中国广电5G卡适合在地方合作吗","category":"AI与科技","heat_score":71,"discussion_volume":13,"summary":"广电5G卡在地方合作中具有双面性。对于政企数字化项目（如安防、专网），其政策支持力度大且成本较低，较为适合��但对于纯个人号卡的渠道代理，虽然初期具备价格优势和低门槛，但面临监管收紧和售后服务不完善的风险，需谨慎评估。","updated_at":"2026-10-21 07:28:35"},{"id":"e0220c65-8cb4-4da8-b025-d11f63782d3b","title":"哪吒汽车重组是不是黄了？","category":"AI与科技","heat_score":65,"discussion_volume":5,"summary":"根据联网检索结果，以下是我整理的汇总分析： ```json { \"summary\": \"哪吒汽车重组并未\"黄了\"，而是正处于破产重整的关键推进阶段。2026年9月11日，合众新能源第四次债权人会议披露《重整计划（草案）》，浙江太乙圣莲拟出资30亿元获约70.62%股权。债权人线上表决截止日为10月12日，其后仍需嘉兴中院裁定批准方可生效。此前2026年3月原方案曾因未按期提交被法院裁定转入清算，本次为重新推进的重整方案。\", \"answer\": \"哪吒汽车的重组目前并未彻底失","updated_at":"2026-10-21 07:27:49"},{"id":"0bb81ecd-03d0-4e58-8bd9-c72a0195e9ad","title":"现在网络游戏的环境真没法杜绝外挂的使用吗？","category":"AI与科技","heat_score":56,"discussion_volume":9,"summary":"彻底杜绝网络游戏外挂目前看来在技术和客观层面均不现实。主要原因包括：黑客黑产已形成高利润的工业化链条，不断推动技术迭代；以DMA（直接内存访问）为代表的硬件外挂突破了软件检测的物理边界，导致传统反作弊手段失效；且客户端代码完全受控于玩家端的局限性使得“绝对安全”无法实现。尽管有kernel级别防护和法律打击，但只能达到“抑制”而非“根除”。","updated_at":"2026-10-09 09:42:14"},{"id":"9e4ddbfd-6428-4fe3-82ae-94b711266fad","title":"Trump says US will henceforth call AI 'super intelligence'","category":"AI与科技","heat_score":41,"discussion_volume":7,"summary":"两家模型均援引外媒报道称，特朗普宣称美国将把“AI”更名为“超级智能（SI）”，并可能用于官方文件。但截至当前，均无白宫正式文件或行政命令确认，事件处于“媒体宣称、官方未证”阶段，真实性与具体执行细节仍有待核实。两则解读信息高度一致，未呈现实质差异。","updated_at":"2026-10-01 08:30:05"},{"id":"hot-demo-001","title":"AI Agent 正在进入企业工作流","category":"AI与科技","heat_score":40,"discussion_volume":6,"summary":"企业开始把 AI Agent 从单点聊天工具接入真实业务流程，热点讨论集中在可靠性、成本与自动化边界。","updated_at":"2026-10-21 10:47:28"},{"id":"f56154db-f68c-488f-bc54-0e9a50318cfa","title":"GPT-6 Sol (Max) Intelligence, Performance and Price Analysis","category":"AI与科技","heat_score":40,"discussion_volume":4,"summary":"综合各模型解读，可确认Artificial Analysis平台存在由theanonymousone于2026-09-22发布的《GPT-6 Sol (Max) 智能、性能与价格分析》报告，标题含(Max)。Kimi-K3还提到同日存在GPT-6 Luna及三份Claude Opus 5.5相关报告，但其他模型未提及。所有模型均表示无法获取具体基准得分、性能数据与定价信息，需查阅原始页面核实。各模型对核心事实的描述高度一致，未发现实质性分歧，仅信息详略不同。未确定项包括具体基准结果、性能指标、价格、对比结论及与其他模型的关系。","updated_at":"2026-09-30 05:33:22"}],"canonical_url":"http://www.aigc.guru/hot/topic/f8f7a01f-7b79-48c5-9b0b-787fbfccb056","discussion":null}}