Octeryx OS / Foundation Guide 01
Care needs
continuity.
Care depends on context that can survive the next shift, system, setting and connected actor, with authority, freshness and evidence intact.
Foundation Edition 0.1 / August 2026 / 18 minute read
- 01Identity
- 02Memory
- 03Policy
- 04Evidence
Read this if you are
- OperatingA care home, group or care-at-home service
- DesigningCare systems, devices, notices or handovers
- GoverningConsent, policy, evidence or connected technology
- BuildingRobots and agents intended to participate in Care
01 / Opening argument
The missing layer is not another sensor.
Care produces more signals than ever. The meaning still disappears too easily at the next shift, system or setting.
A carer can record an observation. A sensor can detect movement. A model can flag a change. A robot can map a room. None of those facts, by itself, shows that the right person has been identified, that the observation is still current, that the source has authority, that disclosure or action is permitted, or that the path can later be reconstructed.
Care environments do not reset between software sessions. They contain people, history, permissions, responsibilities, routines, uncertainty and consequences. The next actor should not have to rebuild that meaning from disconnected records and local device state.
Care therefore needs a context layer that persists across shifts, devices, applications and settings. It must turn isolated signals into a governed account of who and what is involved, what changed, how reliable it remains, which consent and policy apply, who needs to review it and what evidence should remain.
Perception describes a moment. Context explains what the moment means.
This guide explains that missing layer for care providers, care-at-home operators, families, commissioners and the organisations building technology intended to participate in Care.
Operationalcontext
02 / The continuity problem
Data is not continuity.
An environment may be saturated with information while every actor still operates from a different version of the world.
Care systems store workflow records. Sensors emit readings. Models produce scores. Robots keep local state. People carry knowledge through conversation, notes and handover. Each source can be individually useful while the Care environment remains fragmented.
Fragmentation becomes visible at the interfaces. A device detects movement but cannot establish who moved. A model flags a change but cannot see that the underlying fact has expired. A robot receives an instruction but not the permission boundary around it. A new application asks the same identity and history questions because the previous answers were trapped elsewhere.
The problem is not simply that data lives in several systems. The deeper problem is that meaning, authority and time travel poorly between them.
03 / Category definition
Context operating system for Care.
A governed runtime that helps authorized people, systems, devices and robots work from shared context across homes and care settings.
The category sits between the people and systems that observe care and the actors that communicate, decide or act within it. Its purpose is not to replace the care record, robot control, safety systems or human judgement. Its purpose is to make relevant Care context persistent, governed and portable across them.
A context operating system receives observations and requests, associates them with the right identities, materialises the context appropriate to the actor and purpose, applies policy and confidence, coordinates the permitted response and preserves the evidence required to understand what happened.
Octeryx OS is being designed around that category. The public architecture separates the context runtime from the underlying identity, context-materialisation and provenance infrastructure, while keeping the product understandable to organisations that do not need an internal systems lecture.
Navigation, motion control and hardware safety remain with the machine and its OEM systems.
Applications can present and coordinate work without becoming the owner of canonical context.
Identity, memory, policy, coordination and evidence persist across actors and interfaces.
04 / The durable asset
Hardware changes. Context should remain.
The most valuable thing a Care environment accumulates may not be a device or application. It may be the governed account of how care works around the person.
Machines are replaced. Models are upgraded. Operators change shifts. Applications are procured and retired. Environments expand. If identity, history, permissions, routines and evidence live only inside each component, every change forces the operation to rebuild part of its understanding.
A durable context layer separates what the environment knows from the particular interface currently consuming it. A new robot should not need to become the first historian of the site. A new model should not quietly erase the basis of earlier decisions. A new operator should not inherit only whatever happened to be written in the previous system.
This is why operational context can become a compounding asset. Each governed observation, resolution, policy decision and handover can make the next permitted interaction more informed, while provenance and freshness keep that memory from becoming unchallengeable folklore.
- 01New robot
Identity, environment and operating history remain available through a new actor contract.
- 02New model
The model changes without becoming the sole owner of memory or decision evidence.
- 03New interface
The workflow changes while governed context remains beneath the presentation layer.
- 04New setting
Relevant context moves under explicit policy, identity and handover boundaries.
05 / System requirements
Memory is only useful when it is governed.
A Care context layer must preserve more than events. It must carry the conditions under which those events may be trusted and used.
Identity
Resolve people, machines, objects, places and systems while keeping ambiguity visible.
Memory
Preserve longitudinal context instead of resetting at each device, session or application.
Freshness
Show when a fact, permission or inference may have expired or require revalidation.
Policy
Shape what each actor may see or do for a stated purpose and operating boundary.
Coordination
Route the permitted instruction, prompt, handover or escalation to the responsible actor.
Evidence
Retain the lineage from source to context, policy and outcome for later reconstruction.
These requirements reinforce one another. Identity without policy can disclose the right person to the wrong actor. Memory without freshness can preserve a dangerous obsolete fact. Coordination without evidence can make action impossible to explain. Evidence without clear truth ownership can create another shadow record.
The design question is therefore not whether the system can remember. It is whether memory, uncertainty, policy and accountability remain attached as context moves.
06 / The governed path
From signal to context, action and evidence.
The public Octeryx architecture gives each responsibility an explicit owner rather than compressing the whole problem into a single black box.
- 01Physical or care environment
Humans, robots, sensors, applications and systems emit observations or request context.
- 02Octeryx OS
Normalises the event, applies the actor contract and coordinates the governed route.
- 03Makemake Onboard
Resolves identity and makes ambiguity explicit before unsafe identity use.
- 04ECP Onboard
Compiles relevant context and evaluates confidence, validity, authority and policy.
- 05CongDB Onboard
Commits context, truth-lane, decay, provenance and evidence records to PostgreSQL.
The path is intentionally directional. Environment actors should not write around the governed runtime. Context should not be materialised without policy. Identity-bearing events should not become canonical while the subject remains unresolved. Presentation state should not quietly outrank the provenance-bearing graph.
The target architecture is more important here than the internal names. It makes a commercial promise legible: Octeryx OS is intended to preserve continuity and accountability across a heterogeneous operating environment without pretending to own every device or application.
07 / Actor-appropriate context
The right context is not the most context.
A shared context layer should not become a universal data dump. Each actor needs a permitted, purpose-shaped slice.
A carer, family member, robot, maintenance provider and software agent may all participate in the same environment while requiring very different information. Sharing the entire record is unnecessary and often unsafe. Sharing too little makes coordination brittle.
The useful unit is therefore a context slice: the minimum relevant combination of identity, history, current state, policy and evidence required for a specific actor and purpose. The slice should carry its own boundaries, including freshness, confidence, expiry and prohibited use.
What changed, why it matters, what requires review and which evidence supports it.
The identity-safe, purpose-limited context required to perform or decline a task.
The permitted update for the right person, purpose and disclosure boundary.
Source quality, freshness, policy and uncertainty attached to the selected inputs.
Shared context does not mean shared access. It means coordinated action from one governed account of the environment.
08 / First reference environment
Care makes the context problem impossible to ignore.
Identity, continuity, policy, freshness and human responsibility are not optional refinements when context can affect a person receiving care.
Care environments contain the full context challenge in concentrated form. Residents move between homes, care homes and hospitals. Families, carers, clinicians, devices, voice systems, applications and future robots see different fragments. Permissions and responsibilities vary by actor, setting, purpose and time.
A medication exception, mobility change, family concern, handover note or sensor signal can be individually accurate while still being dangerous when separated from identity, timing, authority or the rest of the resident's context. A safe response often depends less on the volume of data than on whether the right facts are current, permitted and connected.
Care is the only active product mission for Octeryx OS. Octeryx OS Care carries one governed context across care home groups, individual care homes and the private-home edition, Octeryx Home. Octeryx Family remains a delegated companion surface governed by the care home.
Governed resident context
Identity · memory · policy · evidence
09 / Responsibility
Dependable Care context begins with explicit boundaries.
The context layer becomes credible when every actor can see what it owns, what it consumes and what it must never quietly become.
A robot may perceive and act without owning resident memory. An application may coordinate a workflow without becoming the system of record. A model may contribute an inference without turning probability into unqualified truth. A human may retain decision authority without being forced to reconstruct the entire machine path unaided.
Octeryx OS is intended to sit above onboard control, navigation and hardware safety systems. It does not replace them. It also does not claim autonomous clinical decision-making, unsupervised robot operation or replacement of carers, clinicians or human operators.
10 / Compounding value
The next actor should inherit more than an empty session.
Context infrastructure becomes more valuable when each governed interaction improves the environment's ability to orient the next permitted actor.
Most technology deployments restart learning at the component boundary. A device knows its own history. An application knows its own workflow. A model sees the inputs supplied to one call. A new actor enters with limited access to what the environment has already established.
A context operating system changes the unit of accumulation. The environment can preserve resolved identity, source trust, policy outcomes, changes over time and evidence independently of the device or interface that first produced them. Each new actor can begin from a governed context slice rather than from zero.
The compounding effect is not automatic. Poor observations, stale facts and weak provenance should not become stronger merely because they were stored. The system must preserve uncertainty, decay and review requirements alongside memory. Good context infrastructure compounds accountable understanding, not unchecked certainty.
- 01Observe
An actor contributes a signal with source and purpose attached.
- 02Resolve
Identity, confidence, validity and policy shape what the signal can mean.
- 03Coordinate
The permitted context or action reaches the responsible actor.
- 04Evidence
The outcome and lineage improve the next governed interaction.
11 / Working tool
Context readiness canvas.
Use this before a Care pilot, integration, connected-technology or investment decision to find the first place where meaning, authority or evidence will disappear.
A low score is not a reason to abandon a Care use case. It is a reason to place the missing context responsibility inside the design before the pilot creates its own accidental answer.
The first unowned area is usually more important than the total. If identity is ambiguous, policy is implicit or evidence disappears at a boundary, additional capability can make the system less governable rather than more useful.
Portable edition
Use the guide where the Care decision is being designed.
Download the A4 edition with the context frameworks and printable readiness canvas.
12 / Current public boundary
A category thesis is not a production claim.
Octeryx OS is in active R&D. The current public stage is accepted product architecture and deterministic repository proof.
Currently evidenced
- Accepted modular product doctrine, architecture and implementation plan
- Typed Care contracts and bounded deterministic proof paths
- Deterministic fixtures, replay and repository validation
- Accepted Care-only Onboard and PostgreSQL ownership boundaries
- Current claim, risk, data and jurisdiction controls
Not currently claimed
- Live production deployment
- Clinical validation or regulatory approval
- Certified operation or production readiness
- Universal robot compatibility
- Unsupervised autonomous decision-making or robot operation
- Replacement of human operators, care teams, OEM software or safety systems
The distinction matters because Care infrastructure will be judged partly by how accurately it describes itself. Architecture, typed boundaries, fixtures and deterministic replay are meaningful evidence. They are not the same as live operation, external validation, certification or production safety.
This guide explains the intended category and target architecture. It should be read alongside the canonical Octeryx OS facts and proof boundary, which are maintained as the public source of current claims and non-claims.
13 / Company at a glance
Octeryx OS is building the context that care depends on.
One Care context operating system across care home groups, individual care homes and private homes.
- Category
- Care context operating system
- Operating contexts
- Care home groups, individual care homes and Octeryx Home
- Core thesis
- The operational context is the durable asset
- Current stage
- Active R&D · Accepted architecture and deterministic repository proof
- Infrastructure relationship
- One Octeryx OS Care product with explicit identity, context, policy, runtime, evidence and human-control boundaries
Octeryx OS
The context that care depends on
This guide is educational material, not a clinical, safety, engineering, procurement, regulatory, legal or investment recommendation. Product and maturity statements should be read with the current Octeryx OS proof boundary.
Start with the context requirement