<!doctype html>

<html lang="en-GB">

<head>

<meta charset="utf-8">

<meta name="viewport" content="width=device-width, initial-scale=1">

<title>Oxygen: version control you can verify</title>

<meta name="description" content="Oxygen is a version control system, a forge and a build runner designed together: every change signed, conflicts recorded and resolved once, builds reproducible, and all of it hosted where you choose.">

<link rel="icon" href="/assets/oxygen.svg" type="image/svg+xml">

<link rel="stylesheet" href="/assets/site.css">

</head>

<body>

<!-- include header -->

<main id="main">

<section class="hero">

  <div class="wrap">

    <p class="eyebrow">Version control, a forge and CI, designed together</p>

    <h1>Version control you can <span class="grad">verify</span>.</h1>

    <p class="lede">Oxygen records every change as a signed, commutative patch, keeps conflicts as part of history instead of a mess to clean up, and builds in sandboxes that leave a signed receipt. It runs on your own machines, in your own country, and proves what it did.</p>

    <div class="ctas">

      <a class="btn primary" href="https://oxygenhub.io">Explore OxygenHub</a>

      <a class="btn" href="https://oxygenhub.io/andymccall/oxygen/releases">Get oxy</a>

    </div>

    <pre class="term" aria-label="An example session"><code><span class="p">$</span> oxy clone https://oxygenhub.io/andymccall/oxygen

<span class="p">$</span> oxy commit -m "Retry the upload"

<span class="p">$</span> oxy push

<span class="ok">✔</span> Pushed origin/main · sealed by your key · logged</code></pre>

  </div>

</section>

<section class="pillars" id="oxygen">

  <div class="wrap">

    <h2>Three parts, one system</h2>

    <div class="cards">

      <article class="card">

        <h3><span class="tag">oxy</span> Oxygen</h3>

        <p>The version control system. Changes commute, so they apply in any order and reach the same result: no rebasing, and a proposal never goes stale.</p>

        <ul>

          <li>Conflicts are recorded in history and resolved once, by a change anyone can fetch.</li>

          <li>Every change is signed, with Ed25519 and the post-quantum ML-DSA-65 together.</li>

          <li>Imports and exports Git history, commit by commit.</li>

          <li>Keeps repositories on disk or in your own S3 or Google Cloud Storage buckets.</li>

        </ul>

      </article>

      <article class="card" id="hub">

        <h3><span class="tag">oh</span> OxygenHub</h3>

        <p>The forge, self-hosted or at <a href="https://oxygenhub.io">oxygenhub.io</a>: repositories, proposals and reviews, issues and boards, releases.</p>

        <ul>

          <li>Approvals are sealed with the reviewer's key, so a landing proves who agreed.</li>

          <li>Every reference update goes into a transparency log, cosigned by independent witnesses.</li>

          <li>Agents work under grants you can revoke, signing with ten-minute keys, never stored ones.</li>

          <li>A command line, Visual Studio Code extensions and an Android app.</li>

        </ul>

      </article>

      <article class="card" id="flow">

        <h3><span class="tag">flow</span> OxygenFlow</h3>

        <p>The pipeline runner. Jobs run with no network unless they name the hosts they need, from images pinned by hash.</p>

        <ul>

          <li>Three sandboxes: Firecracker microVMs, system-call filtering, and WebAssembly.</li>

          <li>Runners on Linux (x86_64, Arm and RISC-V), Windows, and Android phones.</li>

          <li>Each job leaves a signed receipt naming its inputs, image and outputs.</li>

          <li>Runners update themselves, in test groups first, and roll back on their own.</li>

        </ul>

      </article>

    </div>

  </div>

</section>

<section class="why">

  <div class="wrap two">

    <div>

      <h2>Why another version control system?</h2>

      <p>Git records snapshots and leaves merging to tools and people. Every rebase rewrites history, every conflict is solved again on the next merge, and nothing proves who wrote what unless everyone signs everything by hand.</p>

      <p>Oxygen starts from the other end. A change is a patch with a stable identity, so applying it twice or in another order changes nothing. History is never rewritten. Signing is the default, checked on every push, and recorded where anyone can audit it.</p>

    </div>

    <dl class="facts">

      <div><dt>Commutative</dt><dd>Changes apply in any order; proposals never go stale.</dd></div>

      <div><dt>Conflicts kept</dt><dd>Recorded, built on, resolved once for everyone.</dd></div>

      <div><dt>Signed</dt><dd>Classical and post-quantum signatures on every change.</dd></div>

      <div><dt>Logged</dt><dd>A witnessed transparency log of every update.</dd></div>

      <div><dt>Hermetic</dt><dd>Builds with no network, from pinned images.</dd></div>

    </dl>

  </div>

</section>

<section class="sovereign" id="sovereign">

  <div class="wrap">

    <h2>Sovereign by design</h2>

    <p class="lede">Your source, your keys, your builds, in your jurisdiction. Oxygen has no service it must call home to.</p>

    <div class="cards three">

      <div class="card flat">

        <h3>Host it where you must</h3>

        <p>Run OxygenHub and its runners on your own hardware or cloud account, in the UK or wherever your data has to stay. Storage can be your own buckets.</p>

      </div>

      <div class="card flat">

        <h3>Prove what happened</h3>

        <p>Signed changes, sealed approvals, build receipts and a witnessed log let an auditor check the history without trusting the server that holds it.</p>

      </div>

      <div class="card flat">

        <h3>Keep builds in</h3>

        <p>Jobs reach the network only through hosts you allow, every decision logged, so a build cannot quietly fetch or send what it should not.</p>

      </div>

    </div>

  </div>

</section>

<section class="status">

  <div class="wrap">

    <h2>Where it is today</h2>

    <p>Oxygen is young and moving fast, ahead of a 1.0 release. It is built with itself: its source lives on OxygenHub, every push is tested by OxygenFlow on our own runners, and every release is signed and logged. Try it at <a href="https://oxygenhub.io">oxygenhub.io</a>, or install <code>oxy</code> and <code>oh</code> from the <a href="https://oxygenhub.io/andymccall/oxygen/releases">releases page</a> or the apt repository there.</p>

  </div>

</section>

</main>

<!-- include footer -->

</body>

</html>