SentinelOS

Inspiration

Most consumer NAS units are treated as passive hard drives—leaving users vulnerable to silent data sprawl, accidental PII exposure, and ransomware threats. While cloud AI services promise security and organization, sending raw local files off-site completely destroys the privacy advantage of owning a NAS. We realized that local edge hardware (like the UGREEN AI NAS iDX6011 Pro running UGOS) has the compute power to do far more than store files: it can act as an active, air-gapped security guard and intelligent knowledge orchestrator. We were inspired to build SentinelOS to transform the NAS from a passive storage box into a self-defending, self-organizing autonomous edge engine.

What it does

SentinelOS is an edge-native, zero-trust governance and forensic agent for UGREEN UGOS that continuously audits, protects, and synthesizes local NAS storage without relying on cloud AI wrappers:

Air-Gapped Data Forensics: Continuously scans local storage for sensitive data (PII, API keys, credentials) and automatically redacts or isolates compromised files into a local encrypted vault.

Anti-Ransomware & Entropy Canary: Deploys zero-overhead canary files and monitors directory entropy via native UGOS CLI tools. If a rapid, unauthorized file encryption event is detected, SentinelOS freezes process permissions and triggers an emergency local recovery snapshot.

360° Knowledge Dossier Synthesis: Automatically cross-links unstructured media across the NAS (e.g., linking a PDF invoice to a video meeting recording and a CSV statement) to build unified intelligence dossiers without duplicating physical files.

How we will built it

Standard & Specification: Built strictly according to the Uliya Skill Development Standard using the official uliya-skill-kit.Orchestration Layer: Designed the SKILL.md orchestration logic using multi-stage agent pipelines (Ingestion $\rightarrow$ Local Forensic Extraction $\rightarrow$ Entity Relationship Mapping $\rightarrow$ Threat Containment Watch).Native Tool Execution: Utilized native UGOS CLI capabilities (ug-filesystem, local security scanning commands, and system snapshot triggers) to keep execution 100% on-device.Privacy-First Data Flow: Configured structured local schemas using pydantic so that sensitive raw data never leaves the local NAS environment.

Challenges we ran into

................................................................

Accomplishments that we're proud of

.......................................................

What we learned

The Power of Edge-Native AI: Edge AI on a NAS shouldn't just summarize text—it excels when given active governance, zero-trust monitoring, and local storage management capabilities.

Uliya Skill Architecture: Mastering the separation between parent orchestration (SKILL.md), expert agent tools, and platform permission gateways.

Data-Centric Security: Understanding how storage entropy and structural metadata can be combined with local LLMs to detect malicious file alterations in real time.

What's next for SentinelOS

Round 2 Hardware Deployment: Test and benchmark local NPU acceleration and memory overhead on the physical UGREEN AI NAS iDX6011 Pro during our assigned testing day.

Real-Time Web Dashboard: Expand the front-end interface into a native UGOS desktop widget with real-time entropy meters and visual knowledge graph node rendering.

Community Skill Release: Package SentinelOS for the official UGREEN Skills Hub so any UGOS user can turn their NAS into an active, self-defending private cloud with a single click.

Built With

• ugreen