A USB stick that plugs into any machine. Never bricks it.
Plug the Universal PiStick into any machine, open a browser, and you get the Universal Translator and Script Generator running locally — no cloud, no account, nothing installed on the host. The stick cannot write to your computer, nothing autoruns, and nothing executes without your approval.
- Read-only USB face
- Local-first services
- Your approval required
One stick, two local services, zero risk to the host.
Design conversation in, structured intent out
Paste a task in plain language. Axiom speaks through the translator as the interactive common tongue — your words become structured machine intent, never code executed on your input.
http://127.0.0.1:8100Describe → generate → verify → approve
Describe the script you need. The generator writes it, then lints, type-checks, and tests it. You see pass/fail badges before the code is offered. Nothing runs unless you explicitly run it yourself.
http://127.0.0.1:8000Claims gate + sentinel before first boot
PR2 claims gate and Sentinel's 13th Man worst-case pass run green before the agent body ever enters service mode. Protection proves itself first.
local-only"Doesn't brick anything" — the guarantees.
Every load-bearing claim is tagged in the claims register (§0B, PR2).
The stick cannot write to your host
FAT32 USB face holding PISTICK/* only. No write path is exposed. Bricking requires writing — this face cannot write, modify, or delete any host file.
Plugging in does nothing
No autorun.inf, no executables on the USB face root. Nothing launches automatically. You must open LAUNCH.HTML yourself.
Your prompts are never executed
The translator treats all input as data — no eval, exec, compile, or subprocess on your input, ever.
Generated scripts are proven first
Every generated script is linted, type-checked, and tested before you see it. Pass/fail badges shown. Nothing executes unless you explicitly run it.
Scripts stay in your target path
Generated scripts target the path you specify. No host-wide writes unless you deliberately widen the scope.
Green before service mode
Claims gate + sentinel run green before the agent body boots.
Two faces, one stick.
What any machine sees
A read-only FAT32 volume. When you plug the stick into any machine (Windows, macOS, Linux), this is the only thing visible.
- LAUNCH.HTML — one-click launcher for translator + script generator
- READ-ME.TXT — what the stick is and how to use it
- SAFETY-READ-FIRST.TXT — the six no-brick guarantees
What the host never sees
An ext4 partition holding the full agent stack. Invisible to the host unless you boot the card itself as a system.
- Universal Translator (:8100) — local-first, sentinel-integrated
- Script Generator (:8000) — generate → verify → autofix → approve
- OWASP Scanner — 221 hardened rules
- Sentinel + 13th Man gate — adversarial worst-case pass
- PR2 claims gate — every claim tagged and evidenced
Technical specification.
- USB face
- FAT32, read-only, PISTICK/* only
- Agent body
- ext4 rootfs, invisible to host
- Translator
- http://127.0.0.1:8100 — local-first, input-as-data
- Script Generator
- http://127.0.0.1:8000 — generate → verify → approve
- Protection
- OWASP (221 rules) + Sentinel + 13th Man + PR2 claims gate
- Ports
- 8100 / 8000 — loopback only, no LAN exposure
- Host impact
- None — nothing writes, nothing autoruns, nothing executes silently
Ready to plug in?
Build the image, provision the agent body, and ship it. The stick does nothing until you open LAUNCH.HTML.