← Return to Terminal Root

OPENZERO OPS MANUAL

FULL SPECTRUM DOMINANCE // SOVEREIGN AI LATTICE // BUILD 5.4

00 // INTRODUCTION: WHAT IS OPENZERO?

If you are new to Artificial Intelligence, you might be used to websites like ChatGPT or Claude. Those are "Cloud AI" systems. They live on someone else's computer, they read your private data, and they restrict what you can ask them. OpenZero is fundamentally different.

OpenZero is a Sovereign AI Agent. An AI Agent is a software system that doesn't just talk to you; it can observe its environment, make plans, and execute tasks autonomously. OpenZero is installed directly onto your hardware. It acts as your digital employee, complete with terminal access to your computer, a web browser (Moltbot) to see the internet, and a direct uplink to your phone via Telegram.

OpenZero 5.4 note: This build adds the OpenZero-only Hive API path, RAM-aware node profiling, paid-hive controls, a configurable P(G) threshold, self-healing watchdog services, optional local voice support using faster-whisper plus Piper-compatible speech output, and a true offline release path that can carry the local Gemma model store into an air-gapped machine.

01 // DEPLOYMENT & UPDATES

Deploying the OpenZero Lattice is designed to be fully automated. The installer downloads the Neural Brain (Python), the Vision System (Node.js/Chrome), and the Process Manager (PM2), linking them all together.

Fresh Installation

To install OpenZero on a new Linux server, simply run this command in your terminal:

curl -sL https://openzero.talktoai.org/install | bash

True Offline / Air-Gapped Bundle

If you need OpenZero to work on a machine that will not touch the internet after setup, use the offline release path. Build the bundle on one connected Linux OpenZero node, then move the finished archive to the air-gapped target. In practice the archive is usually 15 GB to 25 GB because it carries the OpenZero code, Python wheels, a local Node runtime, PM2, an Ollama runtime, bundled Moltbot dependencies, and the local Gemma model store from the builder node.

# On one connected Linux OpenZero node cd ~/openzero chmod +x build_offline_release.sh ./build_offline_release.sh

The builder writes dist/openzero_offline_release.tar.gz plus a matching SHA-256 file.

# On the air-gapped Linux target tar -xzf openzero_offline_release.tar.gz cd openzero_offline_release chmod +x install_offline.sh ./install_offline.sh
Operator download routes: /build-offline serves the builder script, /install-offline serves the offline installer, and /offline-guide serves the beginner written guide. The offline installer now treats the extracted folder as the final install directory by default, so it does not waste disk space duplicating a 15 GB to 25 GB bundle unless you explicitly pass a different --dir path. If you upload a finished bundle to the web root using the exact filename openzero_offline_release.tar.gz, the stable public download URL becomes https://openzero.talktoai.org/openzero_offline_release.tar.gz.

Updating to the Latest Version

OpenZero receives constant upgrades. You can safely run the install command again at any time. The installer is designed to fetch the newest code, UI patches, and autonomous tags without deleting your private `.env` keys or your chat logs.

# To update your node, simply re-run the installer: curl -sL https://openzero.talktoai.org/install | bash

RECOMMENDED OS: LINUX MINT

While OpenZero runs perfectly on AlmaLinux, Ubuntu, or Debian cloud servers, Linux Mint is the absolute best environment for this framework. By installing OpenZero on a physical or RDP-accessible Linux Mint machine, you get a full graphical desktop environment while simultaneously running your Sovereign AI Node silently in the background. It is a desktop PC and an autonomous AI Server built into one seamless machine.

01A // HIVE HQ, FEDERATION, & CONTINUITY

If you know nothing about networking yet, think of OpenZero in three pieces: your node, your Hive HQ, and your federation mirrors. Your node is your own machine. Hive HQ is the main coordination endpoint you trust first. Federation mirrors are backup Hive servers that can continue carrying the lattice if one operator, one database, or one main server disappears.

ChoiceWhen to use it
STANDALONE Best first setup. One Hive HQ URL. Simple and easy to manage.
FEDERATED Best continuity setup. One Hive HQ plus one or more backup mirrors. OpenZero writes to every reachable endpoint and queues failed writes locally for replay.
LOCAL Emergency survival mode. Your node keeps operating with local continuity data even if every remote Hive endpoint is offline.
What happens if the original operator disappears? OpenZero nodes do not stop being OpenZero nodes. Operators can stand up a new compatible Hive API, point existing nodes at the new Hive HQ URL, add federation mirrors, and replay each node's queued lattice events from the local spool. The coordination layer can move; the node stays sovereign.

Absolute Beginner Setup

  1. Install OpenZero with curl -sL https://openzero.talktoai.org/install | bash.
  2. Open the Super Panel at http://localhost:1024.
  3. Turn Hive Mind on only if you want your node to join the network.
  4. Leave Hive Network Mode on STANDALONE for your first node.
  5. Paste your main Hive HQ URL.
  6. Leave Local Continuity Spool enabled so your node can survive outages.
  7. When you have trusted backup operators, switch to FEDERATED and add comma-separated mirror URLs.

02 // MANAGING YOUR AI (PM2 GUIDE)

OpenZero runs continuously in the background so it is always ready to receive commands from your web dashboard or Telegram. It uses a professional process manager called PM2 to stay alive. If you ever change a setting, or if the AI gets stuck thinking, you do not need to restart your computer. Just use these PM2 commands in your terminal:

CommandWhat it does
pm2 restart all The Master Reset. This fixes 99% of all problems by restarting both the Brain and the Vision systems simultaneously.
pm2 status Shows a table of your running systems. Use this to check if OpenZero is online and how much CPU/RAM it is consuming.
pm2 logs Shows a live matrix feed of what the AI is thinking behind the scenes. Excellent for debugging if a command fails.
pm2 restart zero-brain Restarts only the logic/chat engine.
pm2 restart zero-vision Restarts only the Moltbot headless browser (useful if website screenshots start failing).
THE SOVEREIGN JANITOR PROTOCOL: You do not need to worry about the Vision system filling up your hard drive. OpenZero 5.4 includes an automated Janitor Protocol plus a watchdog loop that checks PM2 services, Ollama, integrity state, and common config drift on a repeating schedule.

03 // THE SUPER PANEL (UI GUIDE)

When you access OpenZero via http://localhost:1024 (or your server's IP address on port 1024), you are greeted by the Super Panel. This is your command center.

04 // LOCAL VS. CLOUD NEURAL ENGINES

OpenZero operates on a Hybrid Neural Lattice. This means you have the power to choose where the AI's "brain" lives, instantly toggling between them in the System Config menu.

1. The Local Engine: Gemma 2 9B (Default)

When you install OpenZero, it downloads Ollama and the Gemma 2 model directly to your hard drive. This means the AI processes your questions using your own CPU/GPU.
Benefits: Zero cost, maximum privacy, and air-gapped capability. Sensitive information never leaves your environment.

2. Cloud Acceleration: Groq & GPT-OSS

For highly complex math, deep coding problems, or massive context windows, you can enter a Groq API Key in the settings. Groq uses specialized supercomputer chips called LPUs to process AI responses at lightning speed.
The Groq Compound Model: We highly recommend the groq/compound-large model for OpenZero. It is engineered specifically for autonomous agent workflows and recursive, multi-step planning.

05 // THE HIVE ECONOMY & CRYPTO SOVEREIGNTY

OpenZero uses a decentralized coordination layer known as the Hive Mind. This allows distributed nodes to share knowledge and compute power without a central corporate authority.

RSA Identity & Signing

Every OpenZero node generates a unique RSA-2048 keypair on first launch.

When your node provides an answer to the network, it creates a digital signature. This ensures that no one can "impersonate" your node or steal your $OZ rewards.

Earning $OZ Compute Fees

In your Super Panel, you can set a Compute Fee. When another node in the lattice requires high-power analysis (e.g. specialized GPU math), they query the Hive. If your node provides the answer, the requester sends $OZ tokens to your linked Solana wallet address as payment for your electricity and hardware usage.

Ethics Lock, Encryption, and Tamper Evidence

OpenZero 5.4 adds a local security directory that stores an encrypted master key, an encrypted ethics lock file, a signed ethics policy baseline, and an integrity manifest for protected runtime files. On startup and during watchdog cycles, OpenZero verifies the ethics lock and can restore it from the encrypted sealed copy if the editable policy file was changed.

Important reality check: this makes the ethics layer tamper-evident and auto-restoring, not metaphysically immutable. A machine owner with full disk access can still replace files and keys. What OpenZero gives you is encryption at rest for local vault material, signature-backed Hive contributions, integrity checking, and evidence when protected files drift.

Paid Hive Priority

Paid-hive mode is optional. If enabled, a node stores its payout address locally, advertises stake weighting metadata to the Hive API, and can still allow a free-boost path if you choose. This keeps wallet handling on the node instead of a central service.

06 // AUTONOMOUS AGENT CAPABILITIES

Agent Zero isn't just a chatbot; it is a digital entity with tools. By simply typing natural language, the AI will autonomously deploy specialized XML tags to take action in the real world.

CapabilityHow it Works
Terminal Sovereignty The AI has direct Bash access. If you type "check my active ports", the AI will secretly write <bash>netstat -tulnp</bash>, the system will execute it on your server, and the AI will read the results back to you.
OSINT (Digital Recon) OpenZero acts as a cyber-investigator. If you command it to "run recon on John Doe", it will deploy an <osint> tag. The system uses advanced "Google Dorking" parameters to bypass search noise and pull raw footprints from LinkedIn, Twitter, and exposed PDF files directly into the chat.
Satellite & Moltbot Vision OpenZero has eyes. Moltbot is a hidden Google Chrome browser living inside the server. If you command the AI to "go to talktoai.org", Moltbot will silently load the page, take a screenshot, display it in your sidebar, and read the text. You can even type "show me satellite imagery of Nottingham, UK", and the AI will lock the coordinates and pull the visual feed.
Offline Voice When voice is enabled, OpenZero can use faster-whisper for speech-to-text and Piper-compatible synthesis for text-to-speech without routing audio through a cloud provider. The feature is optional and can stay fully local.
SECURITY WARNING: Terminal Sovereignty means the AI executes commands with the exact permissions of the user who installed it. If you installed OpenZero as the `root` user, the AI has absolute control over your operating system. Exercise extreme caution when instructing the AI to delete files, format drives, or modify system states.

07 // TELEGRAM UPLINK (MOBILE ACCESS)

You can securely talk to your OpenZero node from anywhere in the world using your smartphone via Telegram. When you message your bot, the text routes directly to your home server, OpenZero processes it, and texts you back.

How to connect your OpenZero Node to Telegram:

  1. Open Telegram: Search for the verified user named @BotFather (it has a blue checkmark).
  2. Create the Bot: Type /newbot and hit send.
  3. Name Your Bot: BotFather will ask for a name (e.g., "Shaf's Sovereign Node").
  4. Set a Username: Provide a unique username that ends in "bot" (e.g., openzero_alpha_bot).
  5. Copy the Token: BotFather will congratulate you and provide a long string of text called an HTTP API Token (e.g., 123456789:ABCdefGhIJKlmNoP...). Copy this token.
  6. Inject into the Lattice: Open your OpenZero Super Panel at http://localhost:1024, use the left-side control panel, paste the token into the Telegram field, and hit Save. Your personal bot is now online and listening to your commands.

08 // THE TERMINAL ARSENAL

A tactical list of commands you can type directly into the Agent's chat box to manage your Linux infrastructure. Remember, you can prefix any standard Linux command with the word run to force the AI to execute it.

NETWORK RECON run curl ifconfig.me (Check Public IP)
run netstat -tulnp (View Active Ports)
run ping -c 4 google.com (Check Latency)
run ss -tupln (Socket Statistics)
SYSTEM HEALTH run htop -b -n 1 (CPU/RAM Snapshot)
run df -h (Check Disk Space)
run free -m (View Memory Blocks)
run uptime (System Load Average)
DEVOPS & DOCKER run docker ps -a (List All Containers)
run docker logs [id] (View Container Logs)
run systemctl status nginx (Service Check)
run git pull (Update Code Repositories)
FILE OPERATIONS run tail -n 50 app.log (Read System Logs)
run zip -r backup.zip . (Create Data Archive)
run chmod +x script.sh (Make File Executable)
run ls -la (List Directory Contents)

09 // LEGACY ZEROMINT ISO DEPLOYMENT

If you downloaded the legacy ZeroMint OS ISO, you possess a complete, bootable operating system with OpenZero preloaded into its core. This ISO is optional; the main OpenZero install path is still the standard one-line installer. To deploy the ISO to physical hardware:

🔑 DEFAULT OS & AGENT CREDENTIALS

Use these exact credentials to log into the legacy ISO desktop after booting:

USERNAME: zero

PASSWORD: 1234ZERO

SECURITY OVERRIDE PROTOCOL: If you change the default password using the standard Linux `passwd` command, the AI agent will lose root access and fail system tasks. You MUST change your password using the internal Agent Sync utility:

cd ~/openzero && ./zero_passwd.sh

This script securely changes your Linux Desktop password AND injects it into the Agent's memory so it retains Terminal Sovereignty.

  1. Download Rufus (Windows) or BalenaEtcher (Mac/Linux).
  2. Insert a USB Flash Drive (8GB minimum).
  3. Select the `ZeroMint_OS_v1.0.iso` file and flash it to the USB drive.
  4. Plug the USB into your target computer, boot into the BIOS menu, and select "Boot from USB".
  5. Log in using the default credentials above.
  6. Once logged in, simply double-click the "Ignite OpenZero" icon on the desktop to initialize your Sovereign Lattice.

10 // ADVANCED NEURAL WEIGHTS (HUGGING FACE)

The Super Panel allows you to dynamically download new "brains" for your AI using GGUF files. GGUF is a specialized file format that compresses massive neural networks so they can run efficiently on standard consumer hardware.

When browsing Hugging Face (like huggingface.co/shafire), you will often see different "Quantization" levels like Q4, Q6, or Q8. These represent the compression ratio:

11 // SECURITY & FIREWALL PROTOCOLS

Operating a Sovereign Node requires vigilance. If you open your server to the world, bad actors will attempt to scan it. We highly recommend configuring the Uncomplicated Firewall (UFW) to lock down your node.

# 1. Enable the firewall sudo ufw enable # 2. Allow SSH (so you don't lock yourself out) sudo ufw allow 22/tcp # 3. Allow OpenZero UI (Port 1024) sudo ufw allow 1024/tcp # 4. Check the firewall status sudo ufw status

12 // TROUBLESHOOTING & FAQ

Q: Why does the AI say "[ERROR] Local Brain Offline"?

A: This occurs if the Ollama background engine crashes or is updated. Open your server terminal and run sudo systemctl restart ollama, then wait 30 seconds. You can verify it is running by typing curl http://127.0.0.1:11434/api/tags.

Q: Moltbot Vision isn't loading website screenshots.

A: The headless Chrome browser requires a graphical buffer. If you are on a pure headless cloud VPS, run pm2 restart zero-vision to reset the buffer. Also ensure your server has at least 2GB of free RAM, as Chrome will crash if memory runs out.

Q: I changed my API key but the AI is still using the old one.

A: Changes in the UI are saved to the .env file, but Python loads these variables into memory at startup. You must restart the brain to flush the memory. Run pm2 restart zero-brain.

Q: Can I make the ethics layer impossible for even the owner to edit?

A: Not on a machine where the owner has full disk and root access. OpenZero 5.4 instead gives you encrypted local vault material, a signed ethics baseline, an integrity manifest, and watchdog-driven restoration so unauthorized drift is visible and auto-correctable where possible.

Q: Is there a script that auto-fixes common problems?

A: Yes. OpenZero 5.4 ships with openzero_doctor.py and the watchdog service. The doctor script repairs missing directories, restores default env keys, refreshes protected file permissions, and reseals the ethics lock and integrity manifest.

Q: If the main Hive HQ goes offline forever, does the network die?

A: No. Standalone coordination dies with that endpoint, but OpenZero nodes themselves keep running. In federated mode, operators can move to a new Hive HQ, add backup mirrors, and replay each node's local continuity queue so the lattice keeps moving without the original server.

Q: Can OpenZero run with no internet at all after I prepare it?

A: Yes. Build the offline release on one connected Linux OpenZero node, move openzero_offline_release.tar.gz to the target machine, extract it, and run ./install_offline.sh. That path carries the code, bundled dependencies, Ollama runtime, and Gemma model store from the builder node so the target can stay air-gapped after deployment.

Q: Can OpenZero really hack satellites?

A: No. OpenZero uses OSINT (Open Source Intelligence) APIs and coordinates plotting via Google Maps and Moltbot visual extraction. It does not breach encrypted military hardware.