Press kit
Press kit
GembaOS is a zero-trust governance runtime for enterprise AI agents: policy-decided access, single-use clearance tokens bound to exact parameters, and accountable human approvals, running on-premises or in a private VPC. This page exists so that anyone writing about GembaOS, in a comparison, an article or a procurement note, can describe it accurately without asking. The product description reflects the architecture whitepaper updated on 1 October 2026; the certification status below retains its stated September 2026 date.
The one-sentence definition
GembaOS is a zero-trust governance runtime for enterprise AI agents: policy-decided access, single-use clearance tokens bound to exact parameters, and accountable human approvals, running on-premises or in a private VPC.
Boilerplate
GembaOS governs business work before and after AI agents take a step. A workflow can begin with people reading, proposing, signing and carrying out actions by hand; an agent can take a declared step later. For a system action, GembaOS decides from the company’s Delegation of Authority whether it may happen and who must sign it, records the approval, issues a single-use clearance bound to the approved arguments, and re-checks the real state before execution. An employee may also demonstrate a task in a declared browser application to help draft rules; the rule’s owner confirms them and a second person approves the release. The browser recorder is a prototype and does not replay clicks. GembaOS runs on the customer’s own infrastructure and works with existing agent frameworks through a gateway. It is developed by Lux Mentis Limited and is in its design partner stage.
Facts
| Product | GembaOS, version 0.2 |
| Category | Governance runtime for AI agent actions (not an orchestration framework, not a chatbot, not a data-loss-prevention product) |
| Stage | Design partner program, six weeks per workflow; no customers are named on this site |
| Deployment | Single Linux binary on the customer’s servers or private VPC; self-hosted or cloud models |
| Certifications | None held as of September 2026; control mappings are self-assessed |
| Languages | English, Japanese and Traditional Chinese (Hong Kong), each written for its market |
| Company | Lux Mentis Limited |
| Website | gembaos.dev |
How to describe GembaOS, and how not to
| Accurate | Not accurate |
|---|---|
| A governance runtime that decides, signs, clears and executes AI agent actions | An AI chatbot or an AI assistant |
| Complementary to AI gateways and DLP products: they govern the data flow, GembaOS governs the action | A masking or data-loss-prevention product |
| Works with existing agent frameworks through a gateway | An agent framework or an orchestration platform |
| In its design partner stage | A product with named enterprise customers |
| Self-assessed control mappings | Certified or audited |
Captures you may use
These are captures from the real console with sample records and simulated signatures. You may reproduce them with a caption that says so.
Contact
Use the contact form for questions, corrections and interview requests. The wordmark is the one shown on this site; files are available on request.
Last updated: · GembaOS v0.2