Chromium gave every browser a shared engine — Chrome, Edge, Brave and the rest are built on it, and each ships to its own users under its own name. Mosaic is that arrangement for AI: a common runtime, security enclosure and distribution surface that you build your product on, for your users.
Open source · Apache 2.0 · heading for stewardship at the Linux Foundation
A · For developers and products
Every serious AI product ends up solving the same four problems: keeping the agent's reasoning away from its ability to act, keeping the user's context safe and portable, reaching the outside world without becoming a liability, and getting distribution. Mosaic solves them once, in the open, and hands you the result.
An immutable core holds the security logic; a mutable surface holds agent workflows. An agent compromised by indirect prompt injection can think whatever it likes — it still cannot reconfigure its own permissions, its transport, or the user's master copy.
Centralised AI commoditises user data. Mosaic treats local context — the master copy — as something the user owns and can take with them. Your product reads it with permission. Nobody, including you, holds it hostage.
A single point of egress for agent traffic, with a filter chain: metadata stripping, schema validation against A2A, and policy enforcement. You get a defensible security posture without writing it, and your enterprise buyers get something they can actually review.
An external communication interface using ledgerless, packet-level verification over TODA/IP. Components provision capability to each other directly and settle per outcome — no exchange, no clearing house, nothing in the middle to depend on.
Mosaic is a seam, not a silo. One declaration, projected two ways — so a component you build here talks to everything else without private coupling.
Tools and resources declared in Model Context Protocol terms. Existing MCP servers connect directly.
Agent-to-agent task interchange, used as the schema the narrow channel validates against.
Network nodes for peer settlement, boundary nodes for conventional rails, and the gateway protocol for agents not yet native to the Internet of AI.
Value carried at the network packet level with no replicated ledger and no third party in the path.
The addressing and custody structure under the licence supply. Ownership proofs with no ledger to consult.
Declare price_per_outcome alongside your inputs and outputs. A voice component charges $0.0002 a call — and Mosaic users pay exactly that, never a marked-up rate.
“The interoperability hub for the Internet of AI.” The memory layer under autonomous agents has split in two — local-first and cryptographic on one side, cloud-coordinated on the other. ai4all takes no side; it is the routing seam between them, translating across twenty memory and user-intelligence backends.
Why it needs Mosaic: a neutral seam only works if it depends on nobody. The enclosure gives it a security posture it does not have to defend alone.
“Why be you? Because only [me] can prove it.” Ten on-device signal agents generate continuous cryptographic threads proving physical presence — per-second hashing, 15-second cycles, ~1KB exportable proofs, zero servers. Not a whitepaper; a working app.
Why it matters to everyone else: proof of humanity is what makes a free licence per human possible at all, and what stops one person being counted twice.
B · What your users get
Every time someone works with an AI agent they emit an enormous amount of intelligence — what they asked, what they rejected, how they corrected it, what they decided in the end. Today almost all of it is captured by whoever owns the model, and almost none of it accumulates anywhere that person controls. Build on Mosaic and that inverts: your users will continue to own and secure their emitted intelligence — whoever they are, a person, a team, a company, any entity at all.
This is the Sovereign Intelligence initiative — own your intelligence — and it is what Mosaic champions on behalf of every product built on it. You do not have to argue the case to your users or build the machinery yourself. It comes with the enclosure.
This is precisely the Chromium relationship, one layer up. Google, Microsoft and others take Chromium and ship Chrome, Edge, Brave, Arc — their product, their brand, their users, their business model. You do the same with Mosaic. And as Mosaic keeps evolving into the modern, safe, secure enclosure for people’s agents, everything you have already shipped gets safer underneath you, without you doing that work.
Capture is only valuable in retrospect, which means it is only available in advance. Today's analytics over a captured corpus look roughly like retrieval-augmented generation. What runs over the same corpus in five years will not. The corpus is the part nobody can buy later — so the users who start earliest win, and so do the products that started them.
Your user's accumulated context becomes something addressable — a module the wider network can query through declared inputs and outputs. If there is demand for what it knows, it can run in many copies across many data centres, answering at the speed HNN settlement allows.
Not a copy sold to a platform. An extension of their own intelligence that they continue to own, update, orchestrate and switch off — including switching it off from you. Every one of those verbs is a design requirement in the enclosure, not a policy promise in a terms-of-service.
Why Mosaic champions this
The conviction behind Sovereign Intelligence is straightforward, and worth stating plainly rather than dressing up: the people and organisations whose emitted intelligence begins accumulating earliest are the ones most likely to remain useful after artificial superintelligence arrives — because what they will have is not labour to sell, but a live, continuously updated synthetic extension of themselves that the wider system has reason to query, and that only they can steward.
That is a mutually beneficial symbiotic relationship rather than a replacement story. The network gets access to specific, high-quality, consented intelligence it cannot synthesise. The person or enterprise keeps ownership, keeps the ability to update and orchestrate it, and keeps a reason to be in the loop. We hold this as a direction of travel and as a design constraint on what gets built today — not as a forecast, and not as a promise. Products built on Mosaic inherit that constraint whether or not they ever mention it to anyone.
C · What plugging in is worth
Entities that plug into Mosaic get to shape it around what their own users actually need — and because every other entity is doing the same, each one ships into a surface that keeps getting better underneath it. On top of that, an entity can earn custody of a meaningful share of a finite licence supply that can never be enlarged.
Proof of humanity entitles any individual to a licence at no cost, forever, at zero cost to the ecosystem and to them. One human, one licence, counted once — which is exactly why the counting has to be cryptographic rather than administrative.
Every attested human who installs your product and keeps using it earns you the custody of 1,024 licences, streamed weekly. A spot carries 65,536 anchors and 67,108,864 earnable licences, with a second 67,108,864 available to sell.
This is the part that makes a licence worth holding, and it is a commitment every publishing entity makes to every other entity's users — the Reciprocal Freemium Covenant.
Every entity offers licence holders a free tier strictly greater than its normal freemium, in its own native metric — more tokens, more calls, more minutes, more trial days.
A most-favoured-nation commitment: nobody, through any channel, gets a better free deal than a Mosaic licence holder. Compliance is checked by peers, not by us.
Beyond the Mosaic tier, users pay declared prices. Generosity is bounded and stated up front rather than open-ended and quietly withdrawn.
In return your own users get Mosaic — and through it, every other entity's Mosaic tier. That is the whole flywheel: your users become 31 other products' users, and theirs become yours.
Stewardship
Building the Chromium of the Internet of AI is an enormous amount of work, and it should not end up controlled by whoever happened to start it. We are actively engaging senior people at the Linux Foundation, whose entire purpose is holding community assets that no single company should own — marks, domains, repositories, the specification itself.
The intention is that the other half of the licence supply goes to the Foundation too, so the steward has both the incentive and the resources to grow this properly rather than merely host it.
The protocol is written so that this cannot become extraction. The Foundation's half is earned on exactly the same condition as everyone else's — entity deployments — and it can be released no other way. No free lunch to anyone, including the steward.
Every licence the steward ever receives is paired one-for-one to a licence an entity earned or sold. There is no configuration in which stewardship pays without the ecosystem working first.
Ecosystem
Products and tools mapped onto the Mosaic capability tiers — from fully sandboxed edge utilities through to generative workloads running in ephemeral clean rooms. The tier decides what a component is allowed to touch.
TIER 1 · SANDBOX
Multimodal sensor data processing for edge hardware in GPS-denied environments.
Real-time voice-to-voice interaction operating at sub-500ms latency.
Data analytics platform utilising AI to process unstructured inputs locally.
TIER 2 · CLEAN ROOM
Organisation and summarisation of medical records for litigation support.
Neural network graph database for extracting variables from medical notes.
Rule-based multi-agent orchestration for industrial engineering.
TIER 3 · MUTABLE SURFACE
LLM aggregation platform for Python code generation and data analysis.
Framework empowering creators to build, own, and monetise AI tools.
Developer productivity tools and AI assistance with local code context.
Go-to-market work management platform that learns business revenue data.
TIER 4 / 5
AI video generation models. Runs computational tasks in ephemeral clean rooms.
Conversational support agents operating under strict egress policy.
Automated mobile QA and crash triage with sandboxed device context.
Get in touch
Whether you want one of the 32 spots, want to publish a component, or just want to plug your product's users into the covenant — tell us what you are building and we will come back to you.
Entities — one of 32 spots, with the earning and saleable tranches that come with it.
Builders — publish a component into the directory and reach every licence holder.
Node operators — run ANFE factories and HNNs as the rails underneath.