Ruby AI Pre-launch · v0.9 Pilot Request Beta

Private beta · docking now

The Autonomous Local Ops Control Plane for Apple Silicon.

Execute local inference with zero marginal API cost. Monitor Proxmox, pfSense, and fleet SSH targets. Control your IT infrastructure from your Mac Hub and iOS companions over an end-to-end encrypted gateway.

Your role

// no cloud relay · no analytics · one confirmation email

  • 100% On-Device Inference
  • SPKI-Pinned Gateway
  • Hardware Keychain Vault
  • Zero Cloud Telemetry
ruby-ops · status board · mac-hub-01 (M4 Pro) LIVE
  • pve-01.lab.lanHealthyproxmox · 4 VMs · storage 61% · HA quorum OK
  • pf-edge.home.arpaHealthypfsense · WAN up 45d · 0 blocked spikes
  • truenas-02Degradedtruenas · pool scrub 78% · SMART warning
  • pihole-coreHealthypi-hole · 4.1k blocks/24h · dnssec OK
  • ts-fleet (12 nodes)Mesh OKtailscale · 12/12 online · 2 exits
  • satellite-imacPinnedgateway peer · spki match · ts 44ms
InferenceoMLX · local
Escape hatch$0.00 · off
Tokens / s27.4
KeychainTouch ID
Gateway :9443SPKI ✓
Cloud telemetryNone

hub$ ruby probe run truenas-02 --deep → pool HEALTH=DEGRADED · 1 vdev replated · briefing queued for 07:00

01 / Why Local?

Your infrastructure data should never cross a cloud boundary to answer a question about itself.

Cloud MSP suites and hosted AI wrappers rent you the same three liabilities forever: your data leaves the building, your bill scales with usage, and your credentials live in someone else's database. Ruby AI resolves all three at the silicon level — inference runs in Apple Silicon unified memory, probes read your LAN directly, and credentials never leave the T2/SEP-protected keychain.

Capability Ruby AI — Local Cloud MSP Suites Hosted AI Wrappers
Data sovereignty where your fleet data lives 100% on-deviceInference in Apple Silicon unified memory (Ollama / oMLX). Probes read Proxmox, pfSense, and SSH targets directly from your LAN. Cloud-boundAgent traffic and alert data are ingested into third-party cloud models and vendor clouds. Third-party modelEvery prompt is shipped to a hosted API and retained under the provider's policy.
Marginal cost per chat, per probe, per seat ≈ $0.00One-time hardware. No per-seat licences, no metered tokens, no per-probe API fees. MeteredPer-seat licences plus usage-metered AI add-ons that scale with your fleet. Token meterRecurring API fees proportional to every token and request.
Credential security where secrets rest Keychain vaultCredentials live strictly in native macOS SecretKeychainStore — gated by Touch ID / Face ID, never exposed to LLM context or memory exports. Vendor-heldAPI secrets and stored credentials sit in remote provider databases. Context leaksKeys and secrets pasted into prompts become part of the remote context window.
Failure mode when the internet drops Still on-dutyInference, probes, dossiers, and the morning brief continue on the Mac Hub. Tailscale keeps companions connected. BlindNo WAN, no console. Monitoring halts until connectivity returns. Offline = deadEvery inference requires egress.
Audit surface who sees your traffic You doSPKI-pinned TLS on :9443 over Tailscale. Zero cloud telemetry by design — there is no dashboard upstream. WiderProvider infrastructure, subprocessors, and their support tooling. WiderModel host plus every subprocessor in its data pipeline.

// rubyai runs on the machine already on your desk. pilots confirm: median probe latency < 120 ms on a 12-node lab fleet.

02 / Core IT Feature Grid

Four control planes, executed from the Mac Hub you already own.

No heavyweight agents deployed per host, no vendor cloud in the middle. Select a plane:

Native probes. No cloud agents.

First-party probes poll the platforms technical operators actually run — then correlate the readings into a single status board and morning brief on the Mac Hub.

  • Proxmox VE — node, VM, storage-pool, and HA-quorum health probes.
  • pfSense — WAN state, gateway latency, firewall interface status.
  • TrueNAS & Pi-hole — ZFS pool / SMART drift and resolver block-delta.
  • Tailscale nodes — mesh presence, exit-node state, key expiry watch.
  • Real-time, agentless — probes speak SSH/API straight from the Hub. Nothing to install per host; a 12-node fleet costs 0 extra licences.
Ruby AI IT Check status board listing watched hosts, edge firewall, security scan and remote-access state.

// live window · IT Check status board · sample fleet data

probe queue5/5 OK · 44ms median

  • pve-01 · cluster.report
    sched every 60s · jitter 5s
    Clean
  • truenas-02 · smart.mirror
    scrub ETA 02:10 · alert escalation armed
    Watch
  • pf-edge · gw.latency
    p1 8.2ms / p2 12.7ms
    Clean

Checklists that execute themselves — with you on the trigger.

Onboarding a new host is a checklist bound to executable IT toolkits. Ruby stages the run; every consequential step waits for your approval before it touches the box.

  • OpenSSH bootstrap — authorized_keys, hardened sshd config, host-key capture.
  • Tailscale deployment — install, join key rotation, tag and ACL diff review.
  • Probe Key provisioning — scoped per-host keys minted into the SecretKeychainStore, never printable, never prompt-readable.
  • Approval gate — each step ships as a reviewed diff with a deny-list blocking destructive commands.

host checklist · web-07 new joinstep 4/6

  • openssh bootstrap
    sshd hardened · key fingerprint saved
    Done
  • tailscale join + tag:k8s-node
    ACL diff +14 lines · you approved 14:22
    Done
  • probe key mint → keychain
    scope: read-only · Touch ID required
    Awaiting you
  • apt full-upgrade
    deny-list halts -f autoremove from toolkit
    Blocked

next staged stepid wk-07-b3

ruby kit run web-07 postgres.backup.enable
dry-run OK · diffs attached · waiting for approval
Staged

A dossier per client. A ledger per fleet. On disk, not in a SaaS console.

MSP-grade client management that lives entirely in local stores — hardware inventory, warranties, network maps, and linked credentials, isolated per client on the Mac Hub's disk.

  • Hardware inventory — serials, specs, and role tags captured from live probes, not hand-typed.
  • Warranty & renewal tracking — 30 / 60 / 90-day horizon groups pushed to the morning brief.
  • Network maps & linked credentials — topology notes and secret references that resolve via keychain, never stored beside data.
  • Local isolation — records persist in CoreData / HUBDB on local disk; per-client partitions; encrypted export when you leave.

client dossier · harborview dental (14 assets)local db

  • hw-inventory · 14 assets
    3 Mac minis · 2 synology · 9 endpoints · serials verified
    Fresh
  • warranty · fortinet fg-60f
    expires in 48 days → 60-day horizon group
    Horizon
  • network map · vlan topology v12
    last probe-linked edit · diff signed by you
    v12
  • linked credentials · 9 refs
    keychain-indirected · 0 secrets co-located
    Sealed

// export → encrypted .rubiarchive · re-import on any M-series hub

A satellite gateway that answers to crypto, not to the public internet.

iPhone, iPad, and satellite Macs pair to the M4 Pro Mac Hub over :9443 — authenticated by pinned certificates, never by passwords exposed to the open web.

  • TLS SPKI certificate pinning — companions reject any certificate whose SPKI hash doesn't match the mint on the Hub. No CA in the middle.
  • Tailscale path — gateway reachable on the tailnet; the Hub never opens a port to the WAN.
  • Client-side idempotency — every companion mutation carries an idempotency key; a flaky LTE retry can never double-execute an approval.
  • LocalAuthentication + StoreKit 2 — approvals on iOS re-gate through Face ID; licensing settles without servers in the loop.

gateway log · :9443spki-verified

  • iphone-15-pro · handshake
    ts 31ms · spki ✓ · cert pinned 41d
    Paired
  • ipad-air · swipe approve wk-07-b3
    idempotency-key 9f3c…a1 · faceid ✓
    Exec
  • observed node · handshake
    spki ✗ mismatch → closed in 0.4ms
    Rejected
  • satellite-imac · resync
    dossier deltas 3 · keys never leave hub
    Synced

egress posturewan surface: none

0.0.0.0/0 inbound → CLOSED
tailnet-only · lan beacon only
Sealed
03 / Architecture Blueprint

One Mac Hub. Four planes. Zero upstream dependencies.

Everything below runs on hardware you physically control. Hover or focus a block to inspect its responsibilities. Arrows mark the full bidirectional data path.

Mac Hub runs the inference engine and stores data locally; an encrypted gateway on port 9443 relays between the iOS companion and the Mac Hub; target infrastructure connects for probes; all flows are bidirectional and encrypted. TLS 1.3 · mTLS peers SPKI pin check approvals · Face ID SSH / API probes direct probe path TIER 0 · TRUST ROOT Mac Hub — M4 Pro Inference Engine · Ollama / oMLX on unified memory CoreData / HUBDB · dossiers on local disk Hardware Keychain · SecretKeychainStore · Touch ID TIER 1 · RELAY Encrypted Gateway :9443 · TLS SPKI pinning · Tailscale client-side idempotency ledger TIER 2 · COMPANION iOS / iPadOS Companion StoreKit 2 · LocalAuthentication approve / read · no secrets stored locally TIER 2 · TARGETS Target Infrastructure Proxmox VE · pfSense · TrueNAS · Pi-hole fleet SSH · Tailscale · scoped probe keys
Trust root stays localInference, storage, and secrets never leave Tier 0. Companions and probes get scoped views.hub = root of trust
Crypto over convenienceThe gateway authenticates pinned SPKI keys, not passwords; unknown peers are dropped before TLS completes.:9443 · spki-only
Companions are satellitesiPhone and satellite Macs read status and stage approvals — they hold no models and store no credentials.satellite ≠ sovereign
Targets stay agentlessProbes speak native SSH/API with scoped keys you minted — nothing persistent is installed on the hosts.0 agents · 0 licences
04 / Waitlist & Pilot Program

Founding pilots: put Ruby on a fleet you actually operate.

We are recruiting a limited cohort of sysadmins, MSPs, and homelabbers with real hosts to pilot the first builds. Tell us about your environment and you'll be matched to the right phase — Proxmox-heavy fleets and multi-client shops get priority slots.

  1. T+0 · Now

    Internal Alpha Live now

    Running daily on production lab fleets: a 12-node Tailscale mesh, Proxmox + pfSense + TrueNAS, and MSP-style client dossiers. The build you see mocked up on this page.

  2. T+3 months · Early 2027

    Closed Beta 50 pilot orgs

    Pilot cohort onboarded through a private channel: full toolkit workflows, companion gateway on personal devices, and a direct line to the build engineers.

  3. T+6 months · ~Q2 2027

    General Availability Ships

    Mac App Store + direct distribution. Founding pilots keep their beta pricing tier and their data exactly where it has always been — on their own Mac.

Join the waitlist

Qualification takes 30 seconds and requires nothing but an inbox.

// stored locally to the pilot ledger · desk notified server-side · no third-party form service · no analytics

Top ↑