Pool useful work
Move complete jobs to the right machine. Split independent evaluation, search, preprocessing, and rendering into atomic shard sets.
FABRIC LIVE · OWNER CONTROLLED
Your machines.
Acting as one.
Rampage turns the computers you already own into a private compute fabric, serves local models through OpenAI, Anthropic, or OpenRouter-style clients, and continuously improves placement inside deterministic safety thresholds.
Unsigned Windows x64 release candidate · SHA-256 hashes published
R
GPUleased
CPUready
CASresume · repair
AIpropose
3AI API surfaces
3/3shards recovered
QUICdirect private mesh
0AI authority grants
STOPlocal + epoch fenced
THE FABRIC ARENA
See your compute.
Command it without surrendering it.
A spatial live view for intuition. A keyboard and screen-reader-friendly Ops Grid for precision. Both are projections of the same evidence-backed state.
THE SHIFT
The hardware is already there.
The missing piece was trust.
Lease exact resources
CPU, VRAM, RAM, storage, runtime, thermal, and power capacity become scoped capabilities—not permanent ambient permission.
Move sealed artifacts
Donated drives become encrypted content-addressed capacity with restart-resumable frames, signed possession challenges, and bounded autonomous repair.
Demand receipts
Every accepted job returns a signed result. Every transition lands in a recoverable, hash-chained evidence ledger.
NATIVE FROM FIRST CLICK
Download it.
Build your fabric.
Rampage is a real desktop application, not a dashboard wrapped around a pile of manual daemons. The shell owns its governed sidecars, local discovery, tray lifecycle, startup behavior, STOP path, and clean shutdown.
MSI + NSIS
The installer creates the desktop launcher automatically, registers the Start-menu entry, bundles all four sidecars, and hands ongoing control to the role-aware system tray.
- Windows 11 lifecycle proof
- Desktop shortcut + close-to-tray
- Unsigned until Authenticode credentials exist
Debian + AppImage
The same Tauri shell and Rust/Python sidecars are assembled on Ubuntu 24.04, staged with SHA-256 checksums, and bound to the exact source revision in a distribution manifest.
- No cross-compiled portability claim
- Native GTK/WebKit build environment
- Stable signing remains channel-specific
App + DMG
Apple Silicon candidates are built natively on macOS 15. Stable publication additionally requires a real Developer ID, notarization, Gatekeeper acceptance, and a stapled ticket.
- Native sidecars and generated icon set
- Unsigned candidates stay candidates
- Stable credentials fail closed
Windows 10 remains an explicit real-machine gate: the dedicated self-hosted workflow must prove the operating-system caption, installer, desktop launcher, tray lifecycle, sidecars, restart behavior, STOP, and uninstall. A Windows Server build is useful candidate evidence; it is not relabeled as Windows 10 proof.
DESIGN GRAPH
Intelligence above.
Authority below.
Rampage has a narrow waist: the signed capability lease. Everything smart can improve above it. Everything powerful can diversify below it. Neither side can wish policy away.
ULTIMATE AUTHORITYHuman ownerArena · Grid · CLI · SDK
PROPOSALS ONLYIntelligence planeDBOS · Pydantic AI · memory
typed intent
CONTROLControllerschedule · recover · reconcile
→
TRUST KERNELGovernorpolicy · signatures · durable fencing
→
NARROW WAISTCapability leaseexact · scoped · expiring · one-shot
authenticated QUIC
NODE 01Command rigGPU · CPU · Ollama
NODE 02Spare PCshards · cache · storage
EDGE CLASSSmall devicebounded foreground work
DATA PLANEEncrypted artifact fabricresume · repair · receipt
EVIDENCE SPINEHash-chained ledgerleases · receipts · recovery
OUT-OF-BANDIndependent STOPno model · network · controller
COMPUTE STRATEGY
Biggest model.
Fastest chat. Different proof.
The new strategy plane previews exactly how compatible memory and measured links should be used—without turning a placement guess into execution authority.
Maximum Model
Combine qualified compatible model memory to fit an LLM no single machine can hold.
Speed Boost
Use tensor peers only when topology predicts faster tokens. Otherwise, stay on the fastest node.
Throughput
Place whole-model replicas for simultaneous users, agents, and batched work.
Efficiency
Choose the smallest qualified fit and preserve energy, thermals, and responsiveness.
Autonomous
Adapt from signed evidence inside an owner envelope; reject authority expansion automatically.
Weights + KV cache→Signed runtime offers→Compatibility groups→Topology gate→Read-only plan
The planner stays read-only. The separate whole-model lane serves OpenAI, Anthropic Messages, and OpenRouter-style text requests through an exact one-shot lease, authenticated QUIC, local Ollama, and a signed transcript receipt. Cross-host tensor and pipeline launch remain fenced.
ONEPOOL
Not fake global RAM.
Useful aggregation.
1Whole jobBest capable node
2Shard setIndependent useful work
3ReplicasThroughput or evidence
4Data localityMove less, prove more
5Certified shardingOnly when topology wins
Every contributor advertises an operation-exact signed capability contract. Old PCs can run complete jobs, shards, replicas, builds, renders, transcodes, simulations, cache, and storage when a shipped adapter proves it. A phone is not a pretend data-center GPU, but it can still preprocess, validate, score, cache, relay, or run a small model when foreground, thermal, battery, and restart-tolerance policy all agree.
UNIVERSAL, WITHOUT THE FICTION
One fabric.
Many useful lanes.
Rampage does not claim that a network turns every remote byte into local RAM or VRAM. It standardizes identity, admission, placement, recovery, evidence, and STOP—then lets operation-specific adapters move work at the boundary that actually scales.
Local AI
Discover installed Ollama models, select an exact worker, and serve bounded text through OpenAI, Anthropic Messages, or OpenRouter-style clients.
- One-shot model-session lease
- Authenticated QUIC streaming
- Transcript-matched signed receipt
Agent swarms
Scatter independent research, evaluation, preprocessing, and transformation work across eligible machines, then recover against an explicit success threshold.
- Atomic shard admission
- Independent retry and recovery
- No worker gains controller authority
Production
Place builds, renders, transcodes, simulations, and batch stages near the compute or data they need—only when a shipped adapter proves the exact operation.
- Runtime digest and isolation contract
- Data-local artifact movement
- Candidate profiles grant no authority
Gaming
Keep the gaming PC responsive by moving eligible background AI, compilation, capture processing, conversion, cache, or server-simulation work elsewhere.
- Thermal and responsiveness envelopes
- Speed lane rejects slow peers
- No fake remote-VRAM FPS claim
Phones + tablets
Contribute scoring, validation, preprocessing, cache, relay, sensor, or small-model work only while battery, temperature, foreground, and restart policy agree.
- Useful work instead of pretend GPU pooling
- Immediate revocation on policy pressure
- Mobile packaging is still a release gate
Donated storage
Turn owner-controlled drives into encrypted content-addressed capacity that resumes after interruption and proves possession before it counts.
- Flushed 4 MiB resumable sessions
- Two independent protected replicas
- Bounded verification and repair
What “universal” means: one trust contract everywhere; operation-specific proof before execution; no capability inferred from a device label.
RECURSIVE INTELLIGENCE
Ambition, isolated from authority.
Rampage continuously scans routes, links, failures, denials, thermals, battery, idle capacity, capability gaps, and storage replication. It can propose mutations, challenge them, replay them, and autonomously earn a bounded canary without a per-change prompt. Anything outside the owner envelope is denied.
Record→Analyze→Mutate→Prove→Audit→Gate→Enshrine
NOT VAPORWARE
Every big claim has a smaller proof.
Exact durable authority
The Governor signs only checked minimum resources. Workers persist consumed nonces and the highest authority epoch across restart.
Atomic pooled work
A complete set is planned against one reservation book and admitted all-or-nothing, with explicit success thresholds.
Direct first. Owner relayed.
Signed peers use direct QUIC when possible. Hard NAT falls back only to the bundled owner relay, with a fresh Governor-signed allowlist and resource caps—never a silent public fleet.
Encrypted donated storage
Flushed 4 MiB sessions resume after restart, quarantine objective corruption, and repair protected data to two independent workers.
Verifiable completion
Workers sign job results and full-content possession challenges; rotating proof budgets keep autonomous verification bounded.
Human-owned interruption
Native STOP latches immediately and reconciles to a hash-chained epoch—even if a crash interrupts propagation.
The relay proof turns off every direct IP transport on both test peers, leaving the owner service as the only possible route. The storage proof interrupts a two-frame transfer, resumes it after a gateway and CAS restart, then repairs one protected artifact across two independently keyed workers. The honest boundary: public-WAN, every-NAT, and physical disk-loss qualification still require separate campaigns.
RAMPAGE 0.2
Stop wasting the machines you already own.
Make them act as one. Make every unit of authority prove where it came from.
Trusted-circle release · public source inspection · proprietary license · unsigned binaries