Mickai · SIOS subsystem
MickaiClaw™
The action-gating subsystem of the Mickai SIOS. Every tool call passes a per-skill clearance gate before commit.
View capabilitiesThe Mickai SIOS
Mickai is a Sovereign Intelligence Operating System (SIOS). It runs entirely on your own hardware, on Windows, Linux, or macOS. No cloud, no telemetry. This page describes one subsystem of the Mickai SIOS. Request a key to install on your hardware.
Included with Mickai. Available on Windows, Linux, and macOS. No subscription. No cloud. Runs on your hardware.

The gate, rendered
No action commits until the clearance gate signs it.
MickaiClaw is the action-gating subsystem of the Mickai SIOS. Every tool call an autonomous agent makes passes a per-skill clearance gate before commit, on your own hardware, with the decision sealed into the Open Inter-Vendor Audit Record under FIPS 204 ML-DSA-65. Approved actions flow downstream signed. Refused actions never reach the actuator.
MickaiClaw. A subsystem of the Mickai Sovereign Intelligence Operating System.
What MickaiClaw does
Eight primitives that make autonomous coding safe to run on your own hardware. Each one is wired into the same Open Audit Record substrate, so every action is signed before it lands.
01 / Function
Core function
The action-gating subsystem of the Mickai SIOS. Every tool call passes a per-skill clearance gate before commit.
02 / Audit
Signed audit
Every state transition emits an Open Inter-Vendor Audit Record signed under FIPS 204 ML-DSA-65, walkable end to end by an offline verifier.
03 / Sovereignty
Operator-held keys
Cryptographic identity sits in TPM 2.0, secure enclave, or HSM controlled by the operator. The vendor cannot edit history.
Patent anchors
MickaiClaw sits on three of the 101 filed UK patent applications behind the Mickai desktop app. Each patent below covers a distinct primitive that the sandbox exercises in production.
GB2607309.8 to GB2611702.8, GB2611885.1 onwards, and GB2612762.1 to GB2612793.6 · 101 filed UK patent applications · Approximately 2,234 claims
How to run it
- 01
Install
Drop MickaiClaw alongside the agent runtime. Operator key ceremony in TPM 2.0 or HSM. No vendor account required.
- 02
Configure clearances
Per-skill clearance manifest. Read-only, typed-action, or destructive each map to a different gate, signed under the operator key.
- 03
Run
Every tool call hits the gate before commit. Approved actions flow downstream signed; refused actions never reach the actuator.
- 04
Audit
Open the audit chain in the browser-resident verifier. Walk every gate decision and every approved or refused action end to end.
Wired with
- ML-DSA-65 signed records (FIPS 204)
- Open Audit Record (OAR) emit pipeline
- TPM 2.0 / secure-enclave key custody
- Trust-domain externalisation pattern
Ship signed work, not silent code.
MickaiClaw ships inside the Mickai SIOS. Request an access key and Micky will issue one personally, or read more about the wider sovereign operating system first.
Engineered by Mickai LTD, United Kingdom · @mickyirons