Download

MonarchHow it works

How Monarch is built

Several separate processes, one rule-based core and dozens of modules. All of it on your computer.

Five processes, each with its own job

Pick a process — I’ll show what it talks to and where the boundary runs.

Module runtime

The Kernel and the modules. It listens only on 127.0.0.1 — nothing outside can reach it.

  • Monarch windowThe Electron interface. This is where you write, choose modes and confirm actions.
  • Module runtimeThe Kernel and the modules. It listens only on 127.0.0.1 — nothing outside can reach it.
  • OscarThe local backend: models, chat and the agent. Models run on llama.cpp in GGUF format.
  • SafeA separate process with no network. Nobody else ever sees the Safe’s keys.
  • SecurityA Windows task with limited rights. It keeps working even when Monarch is closed.

One decision per action

Modules don’t grant themselves rights. They collect facts, and a single layer — the PolicyKernel — makes the final call: allow, ask you, or deny. Verification is separate: an action only counts as done once the core has confirmed its effect.

  1. 01Modules gather facts
  2. 02PolicyKernel decides
  3. 03The Kernel executes
  4. 04The result is checked

The path of a request

Words are not results. Monarch checks the deed.

Every task takes the same path. The model proposes — it doesn’t decide.

  1. 01

    Request

    You write in plain words.

  2. 02

    Oscar understands

    Tells a command apart from pasted text, logs and code.

  3. 03

    Exact action

    The task becomes a concrete action with parameters.

  4. 04

    Permission check

    A separate layer decides: allow, ask you, or deny.

  5. 05

    Execution

    The Kernel does exactly what was approved.

  6. 06

    Verification

    Monarch looks at what actually changed.

  7. 07

    Receipt

    A result with proof, not a nice sentence.

Open the “Notepad” app

Allow · Within the access mode you chose

Done · window opened and found

  • Allow

    The action fits the chosen mode — Monarch executes it and verifies the result.

  • Ask you

    A one-time confirmation bound to that exact action. If the action changes, a new one is needed.

  • Deny

    A hard stop. Neither confirmation nor owner rights can lift it.

What no “yes” can unlock

  • Deleting a drive root or an entire workspace
  • Changing protected areas of Windows
  • Escaping the allowed folder through links and workarounds
  • Access to the Safe, passwords, tokens and keys
  • Disabling Monarch’s or Windows’ protections

21 modules in one system

21 of 21

  • oscar

    Oscar

    Chat and an agent that understands the task

  • models

    Models

    Local models and their installation

  • memory

    Memory

    Memory V4: remembers what matters, keeps projects apart

  • coder

    Coder

    Working with code inside a chosen project

  • computer

    Computer Use

    Sees windows, clicks, types — Beta

  • system-shell

    Terminal

    Commands only within your permissions

  • knowledge

    Knowledge

    Search across your documents

  • workspace

    Workspaces

    The boundaries the agent works within

  • artifacts

    Artifacts

    Files and reports Monarch created

  • astra

    Skills

    Ready-made scenarios via “+” or “$”

  • voice

    Voice

    Dictation and speech on the device

  • profile

    Profile

    Personality and conversation style

  • safe

    Safe

    Encrypted storage

  • security

    Security

    Monitoring and action protection

  • sharing

    Sharing

    Local access for your own programs

  • telegram

    Telegram

    A bot for talking to Monarch

  • plugins

    Plugins

    Connectable services

  • custom-tools

    Custom tools

    Tools you add yourself

  • device

    Device

    Hardware details for choosing a model

  • diagnostics

    Diagnostics

    Clear reasons for failures

  • assistant

    Assistant

    Basic answers and routing

Models to choose from

Monarch offers Basic 2B, Basic 12B and Pro 27B and recommends the one that fits your computer. You can add your own models too — from a file or a link. Models are downloaded separately from the app and stored on your drive.

  • Basic 2BFast · basic8 GB
  • Basic 12BFast · smarter16 GB
  • Pro 27BBetaSlow · maximum30 GB
Docs →

Memory that doesn’t gossip

Memory V4 keeps ordinary chats apart from Coder projects, finds what’s useful from past conversations and marks answers where it used memory. You can turn it off; Incognito and sensitive sections never enter it.