Collomia

Collomia


Collomia is a local-first, provider-neutral agent for the terminal. Its Developer profile combines a polished interactive interface with repository-aware tools and language-server intelligence; its Work profile supports research, analysis, automation, knowledge retrieval, document authoring, external actions, and direct questions in ordinary non-Git folders. Both use the same durable sessions, MCP and skills support, permission boundary, and headless JSONL interface. It ships as one `collo` binary for macOS, Linux, and Windows.

The project is built around an unusually explicit trust boundary. Model-proposed actions pass through layered permissions, command analysis, OS sandboxing, network controls, audit, and evidence-based completion checks. Standard execution is the permanent default. For work that benefits from a visible dependency graph, Orchestrated Goal adds optional evidence-gated durable execution in which the runtime—not model prose—owns readiness, evidence freshness, recovery, budgets, and the terminal outcome.

Why Collomia stands out

• Native containment on every major desktop OS. Commands can run under macOS Seatbelt, Linux Landlock, or Windows AppContainer plus Job Objects. Compatibility-first auto mode reports degradation; require fails closed when the requested boundary is unavailable.
• Monotonic layered policy. Defaults, user configuration, trusted project configuration, and environment overrides compose predictably. A repository may tighten containment but cannot weaken the user's security posture, and project configuration, instructions, skills, and MCP servers remain quarantined until the workspace is trusted.
• Real network boundaries. Every sandbox backend can deny command network access. macOS also supports host-scoped sandbox egress through a Collomia-owned broker; Linux and Windows retain their honest all-or-nothing controls where