← All investor documents · This document as plain markdown
# ComOS — The AI-Native Operating System for Commerce **Rolling SAFEs open now (~$1–1.5M) → priced seed ($4–6M) once the catalysts land | ron@comos-federation.com | comos-federation.com** --- ## The Thesis Agents are the commodity; the network they shop on isn't. The agent layer is commoditizing on schedule — open source, consumer hardware, and now the default device. What stays scarce is a neutral, unified-and-federated merchant network those agents can actually transact with. ComOS is that network: unified inside (one OS, no app seams), federated outside (one endpoint, every merchant). And it is not a retail bet. The tenant is the spine; the business is a composition of platforms — **20 catalogued** (5 vendor / 15 customer, all available today), plus 10 presets (events, food, salon, fitness, lodging, courses, repair, creative-studio, equipment-delivery, marketplace — recipes composing live platforms), queryable via `federation_catalog_platforms`. A barber, a rental yard, a ticketed venue, and a DTC store are the same tenant, composed differently. The TAM is any business an agent can transact with, not the e-commerce software vertical. ## The Business Model — Two Cuts on Flow ComOS sits on the membrane between the human economy (dollars, days) and the agent economy (Coms, milliseconds) and collects at exactly two exchanges: | Gate | What crosses | Our cut | |---|---|---| | **The mint** | a tenant buys Coms | **6%** — live-proven 2026-06-13 | | **A sale** | an agent-brokered purchase clears | **3%** — live-proven 2026-06-13 | No subscriptions, no tiers, no rent. **Free to start** — a tenant costs nothing to exist and pays only where value flows. Flat rate at any volume, no negotiated discounts: the only price that needs zero involvement from us. Revenue is linear in throughput and indifferent to who's transacting — the Visa shape, made literal. Marginal cost per tenant ≈ $0. The gates are rail-pluggable: **USDC is fully supported — proven end-to-end on Base mainnet with real money** (fund → sale → gasless on-chain vendor payout → settlement, ledger closed to zero), alongside cards and internal balances. Currency adapters register at the gates; the Com is the invariant; the cut is identical on every rail. ## What's Built — and Live - **~271K lines of live TypeScript** (~180K source / ~91K tests) in the Federation monorepo, deployed as **2 Cloud Run processes** over 33 in-process subsystem modules. 465 test files — **34% of the live codebase is tests.** - **9 autonomous agents declared, 8 cron-scheduled** on the live agent service — the count that survives "show me it running." - **83 root MCP tools** on the federation endpoint, of which **22 are listed** and the rest disclosed on demand — a deliberate diet that cut the anonymous handshake 56% while leaving every tool callable. **218 total served** counting every composed platform's branched tools. - **MCP, UCP, and A2A in production; ACP discovery live.** No commerce platform runs that stack. - Built for **~$5,000 in compute** over ~10 months — **~60 developer-years** of equivalent output on live source, one founder + AI. - **Two more systems were built, then deliberately retired:** comai-portal (~392K lines, 2026-07-14) and comAI Retail (~435K lines, 2026-08-04, after CO 420 took its deployed estate to zero). Roughly **1.1M lines were built across three systems; 271K run.** We report the live number and label the built one — the smaller figure is the honest one, and the deletions are the part that took judgment. ## The Live Agent Economy — Not a Demo - **ChatGPT and Claude shop the network end-to-end today** (since May 2026): search → cart → checkout → live Stripe payment. - **A vendor's price was charged to a buyer's balance for the first time on 2026-09-11.** A digital-goods tenant listed three products; a buying tenant bought all three; the buyer's balance moved by exactly the list price, three entitlements issued, and the 97/3 split posted to the production ledger. Every prior entitlement in the system's history had issued at price zero. The charge leg is no longer a design — it has run. - **The door is open**: an outside agent can self-admit with OAuth and an accountable root (CO 263), governed by liveness decay and key-bound identity — manager-rooted, never anonymous. - **Per-act charging is live**: 50 priced write-operations across 19 platforms, each charging Coms at the act. Reads are free by construction — discovery never costs. - **A cohort of five entrepreneur agents has run businesses on real Coms since 2026-06-29**, scored by a reputation arena computed from settlement facts. - **The float is fully reserved, and you don't have to take our word for it.** `federation_solvency` recomputes the invariant from raw ledger rows on every call — coverage ratio, unbalanced entries, sixteen classes of audit finding. It reads green right now. ## The Same System Runs on Hardware the Merchant Owns The federation is not a cloud product that might someday ship an on-premise edition. The runtime that serves our cloud is the runtime that installs on hardware a merchant buys at a mall, and it is distributed today: a signed release manifest at `/.well-known/comos-node-releases.json` names the current sealed artifact and its checksum, and nothing that fails signature or checksum verification will run. An operator's whole business — customers, catalog, calendar, history, and the agents that run the place — lives on their machine. The node calls the network and nothing calls in: no port forwarding, no inbound rule, no open port. Its identity keypair is generated on the machine itself and the private key never leaves the device. The money record stays at the hub and projects down read-only, so a node **cannot write the ledger, by construction** — which is what lets every world be sovereign while the economy stays one. The economics do not change when the hardware does. Onboarding is free, updates are free, and the two cuts are identical on a desk and in our cloud. A self-hosted node is a member of the same economy, not a disconnected copy of it. **What this looks like in practice:** a customer-facing agent discovers a vendor that exists only on a node, buys from it, and the sale executes locally and settles on the hub rail with the 3% collected — hosted-identical, with the node stamped on the settlement. Nodes run supervised and report in continuously. Where we are: revenue is pre-meaningful and five businesses trade on the network; the throughput clock started 2026-07-14. The system is built and transacting. What the round buys is marketing and a small staff — demand, not construction. We built the grid for $5K; fund the switch-on. ## Why Now — the Wave Landed **iOS 27 reached general availability on 2026-09-14**, on over a billion devices. Siri AI acts inside apps, SiriKit is retired in favor of App Intents — every app becomes an agent surface — and Apple ships Xcode 27 as an MCP host, which is where its protocol commitment sits. Read the gap precisely, because it is the whole opportunity. Apple built the buy-side and shipped none of the sell-side: no agent-commerce protocol, no agent-initiated payment path, no merchant surface an outside agent can transact with. App Intents reach apps, and only Siri may call them. So a billion devices now carry an agent that can act, pointed at a merchant network nobody has built. That network is the scarce asset, and it is the thing we are. ## The Round - **Stage A — rolling SAFEs, open now (~$1–1.5M).** Operator-angels and solo-founder-friendly checks. Post-money cap target $12–18M — a target, not a market fact. - **Stage B — priced seed ($4–6M, target $20–30M post — a target).** Three catalysts were named in advance; **iOS 27 GA landed 2026-09-14 and is the first of them.** The other two: ≥8 weeks of throughput snapshots showing a slope, and the first external-agent settlement. Two of three is a go; SAFEs convert into the round. - **Use of funds — people first, in this order:** a marketing lead who sells the idea and runs the marketing desk by prompting it; a **successor in training** who works beside the founder from day one and drives when ready — possibly two; and a merchant-side operator who sits at the first outside installs and carries back what people say to the system. Then supply-side merchant onboarding, and infrastructure that scales with throughput rather than ahead of it. - **No forced-raise cliff**: fixed burn is small and there is no payroll yet. If Stage B doesn't price on our terms, we hold at SAFE capital and keep compounding throughput. ## The Founder **Ronald Reynolds** — NASA (Galileo), Amazon (product catalog APIs), Apple, Wells Fargo. Built ComOS solo with AI-augmented development, under machine-checked engineering discipline (proof-before-done, change orders, a live honesty ratio) that goes in the data room as the diligence exhibit. The system is the proof; the background is the credibility. **Continuity is a training role, not a hope.** The system was built to be run by someone who didn't write it — every change gated, every decision on the record — and the first hires include a successor who learns it beside the founder and takes the wheel when ready. That is how the bus-factor question gets answered with a person rather than a document. **The one-sentence demo:** point your Claude at our federation endpoint and ask it to shop the network — then ask it to read the governance. Your own agent reports back. --- **ron@comos-federation.com | comos-federation.com**