Last week I wrote about building a kernel-integrated AI that doesn't hallucinate. People asked: "How does it actually work?"
This post is the technical answer.
IONA AI runs inside the operating system kernel. It reads CPU temperature, kills processes, changes governors, and even synthesises drivers. But when an AI has that much power, it can't just guess. It needs to be rational, self-correcting, and aware of its own reasoning.
Here are the five mechanisms that keep it honest.
- The Causal Chain — Not Just Logs Most systems log events. IONA AI builds a causal graph.
Every event, a temperature spike, a governor change, or a user command, is stored with a parent pointer. When the AI sees a problem, it traverses the chain backwards.
For example, event temperature equals eighty-nine degrees Celsius. Its parent is governor set to Performance. Its grandparent is user started compiling kernel. Its great-grandparent is user typed make dash j eight.
This isn't just a stack trace. It's a causal narrative.
The AI uses this to answer why questions. When you ask why is the CPU hot, it doesn't just say because load is high. It says temperature rose because governor was set to Performance when you compiled the kernel, which spawned eight threads that consumed ninety-five percent CPU for four minutes.
That's the difference between logging and reasoning.
- Cycle Detection — Breaking Circular Logic AI systems can fall into loops.
A causes B, B causes C, C causes A.
This is subtle. The AI might suggest lowering the governor to reduce temperature. But if the system is already thermal-throttling, lowering the governor might increase compile time, which keeps the system hot longer.
We built a cycle detector into the causal chain. When the AI proposes an action, it checks if that action would create a loop in the causal graph.
If a cycle is found, the AI reports it explicitly. It says causal cycle detected: thermal throttle leads to governor change leads to cpu load leads to thermal throttle. I cannot resolve this internally. Suggest active cooling or reducing workload.
This forces the AI to stop spinning and ask for external help, rather than pretending it can solve the problem.
- Hallucination Detection — Cross-Fact Consistency The biggest risk of a kernel AI is hallucination. If it says CPU is at sixty degrees Celsius but it's actually ninety, a human might trust it and not act. That's dangerous.
IONA AI cross-checks facts.
When the AI says CPU is over eighty degrees Celsius, it verifies the correlation with power draw in watts. If CPU temperature is high but power draw is low, the system knows something is inconsistent.
This cross-fact consistency prevents the AI from confidently stating false information. It doesn't just trust its own output. It verifies it against other system metrics.
- The Parliament — Consensus Before Action The AI doesn't act alone. It has a governance system called the parliament.
When the AI wants to do something risky, like changing governor, killing a process, or installing a driver, it proposes the action to the parliament. The parliament votes.
Each vote is recorded, along with the reasoning. If the parliament reaches quorum, which is sixty-seven percent approval, the action is executed.
But here's the important part. The outcome is persisted to long-term memory. The AI remembers why the action was approved or rejected and uses that knowledge in future decisions.
This prevents the AI from making the same mistake twice. It also provides an audit trail for every action taken by the AI.
- Adaptive Backoff — Don't Reason When the System is Dying When the system is under heavy load, the AI stops doing expensive reasoning.
If CPU usage exceeds eighty percent, the AI switches to a lightweight mode. It only uses basic responses. When the system is idle, it uses deep chain-of-thought.
This ensures that the AI doesn't make the system worse by consuming resources it doesn't have. It's a mechanism of self-preservation, not for the AI, but for the system it runs on.
With these five mechanisms, IONA AI is no longer a chatbot. It is a rational agent that builds causal narratives instead of just logging events, detects and breaks circular reasoning, cross-checks facts to avoid hallucinations, consults a governance system before taking risky actions, and adapts its reasoning depth based on system load.
All sixty-three thousand lines of it, written in Rust, running in Ring 0.
The code is not yet fully public, but you can see the architecture on GitHub. IONA OS launches September 15, 2026. The website is iona.zone.