rabbit unveils OS3, an agentic OS with direct computer control

rabbit released OS3, a cloud operating system for software agents that takes a stated outcome as input, then reasons with connected models, skills, and devices—including local PCs via the rabbit agent—across up to five machines per account.

SOFTWARE desk — personal agents are crossing from chat toys into multi-device computer control. Bring-your-own-key plus a local agent is the consumer shape of that shift.

What you tell it, and where the work runs. A user states an outcome. The system works out the rest by reasoning with connected AI models and whatever else the task calls for: the web, services already in use, or connected devices. OS3 runs in the cloud, but connects to and operates devices through the rabbit agent, which installs with a single command. One account can be connected to up to five devices. OS3 determines where each task runs, on a single device or across several, moving work between them and pulling any needed files, applications, and skills. The cloud part lives on rabbit’s computers. The agent is the program on a machine you connect. Five is the page’s cap for one account. This desk did not connect five machines.

One identity, in the page’s words. OS3 is built on a unified user identity that ends isolated accounts and fragmented chat threads. Two pieces follow. Multi-device orchestration: instead of making the person choose a local PC, a cloud VM, or a dedicated AI computer, OS3 picks the device, or the combination, before it runs. A VM is a virtual machine, a computer you rent. One continuous conversation: there is no session list and no separate threads. In their place is a single linear conversation. OS3 keeps track of past outputs, recalls what the user has said, and keeps working in the background. File that split as the page’s. This desk did not scroll a history.

Bring your own key, and skills you paste in. The page says OS3 is open at the model it runs on, the skills it can use, and the devices it can reach. Bring Your Own Key means users can power OS3 with API keys from the latest models of frontier AI labs, from cloud router platforms, or from locally hosted models, and can swap models without affecting context, memory, or skills. An API key is the secret a model maker issues so a program can call that model, with the bill following the key. Context is the running thread. Memory is what the system says it keeps. A skill, on this page, is a capability published somewhere else. Universal skill compatibility: copy the skill’s URL, paste it into the chat, and OS3 sets it up without command-line prompts or extra configuration files. A URL is the web address. Those lines are the company’s. This desk did not paste a skill or swap a key.

Direct computer control, and whose claim it is. The page says OS3 fuses an LLM with coding and personal agents. An LLM is a large language model, software that reads and writes text. Using rabbit’s DLAM technology with a local agent, OS3 can operate desktop software, local files, and web pages on the user’s behalf, and can write, debug, and run software workflows on its own. The page says DLAM. It does not spell the letters. The same page calls the earlier r1 work LAM, also without spelling the letters. Do not expand either acronym. File the control claim as the company’s. This desk did not watch it drive a desktop.

Privacy, as the page states it. The rabbit agent runs locally on the machine and does not copy, store, use, or sell your data. As with any cloud assistant, conversations with OS3 and the memory built from them are stored on rabbit’s servers. The files on the computer are not. To carry out a task, OS3 sends relevant content to a connected model provider the user chose, and that provider handles the data under its own terms. Before that handoff, the data is processed through rabbit’s servers, along with any prompts needed to finish the task. A prompt is what was asked. rabbit says it does not keep a copy of this data, and the files themselves stay on the computer. OS3 acts in response to instructions and does not run tasks on its own. Sensitive actions require the user’s confirmation. System-level permissions are requested locally by the operating system on the machine. Users can revoke permission at any time. Those sentences are the page’s. This desk did not inspect a server or a local disk.

The track-record paragraph is the company’s marketing, not a ranking. Since its founding, rabbit says it has looked for the best way for a person and a machine to work together. From the LAM behind the r1 to OS3, it says every solution it shipped has been at the industry’s frontier, and that many arrived ahead of comparable technologies from far larger companies. Frontier and ahead are the page’s words. This desk did not rank products. The page calls OS3 the capstone of that work, after twelve consecutive months of upgrades for rabbit devices, including rabbitOS 2, terminal mode, and a move to bring-your-own-key support for DLAM. Twelve is the company’s count. This desk did not list the months.

The quote, as color and as the company’s aim. Jesse Lyu, founder and chief executive, said the company spent two and a half years building toward a system you do not operate, and instead just tell the outcome. He said OS3 lets users stop worrying about whether a task is technically possible, and start on whatever is on their mind, a wild idea or a concrete problem. He said combining open skill compatibility with direct computer control turns human intent into complex, multi-device action. File the name, the title, and those sentences as the page’s. A quote is not a measured success rate, and it is not a count of devices in the field.

How a person starts, and what is still ahead. Today, on this page, is 22 Sep 2026. Users start at os3.rabbit.tech on a desktop, log in or create a rabbit account, and finish onboarding in one conversation. Then they can talk to OS3 through the web portal on a desktop or a phone, through a paired Telegram, through iMessage, RCS, or SMS, or with rabbit’s own r1. Additional input methods are coming soon. The page does not name them. Do not add them. On the device side, any machine running the local rabbit agent can be controlled: Windows, Mac, or Linux PCs, cloud VMs, dedicated AI machines, and the r1 today, with more device types to follow. rabbit’s upcoming cyberdeck will ship with OS3 as its default operating system. The about box calls that cyberdeck a dedicated vibe-coding machine. Vibe coding is the company’s phrase for a machine meant for writing software by describing the outcome. The page does not print a ship date for the cyberdeck, and it does not print a price. Do not add either.

The about box, and where it stops. rabbit inc. is an AI startup rethinking how humans and machines interact. It was founded by Jesse Lyu, a two-time Y Combinator alumnus, formerly of Raven Tech. Y Combinator is a startup program. The company says it is building rabbit OS, an agentic operating system that works across platforms and performs actions on a user’s behalf. It also designs hardware, including the r1, which the page says won an iF Design Award in 2025 and the Red Dot Award: Best of the Best. Those awards are the page’s list. This desk did not judge them. The media contact on the page is Michael McKay, media@rabbit.tech. The address stays in Sources.

Plain English for the rest of the card: agentic = the software takes steps, not only a reply. OS3 = rabbit’s name for this cloud layer. rabbit agent = the program that installs with one command on a connected machine. five = the most devices one account can connect, on the page. VM = a rented computer. Bring Your Own Key = you supply the model access, and you can swap models without the page saying you lose context, memory, or skills. API key = the secret that lets software call a model. skill = a capability you add by pasting its web address into the chat. LLM = a large language model. DLAM = the name the page uses for the technology that, with the local agent, drives desktop software, files, and web pages. The page does not spell DLAM or LAM. confirmation = a sensitive action waits for the user. cyberdeck = the upcoming machine the page says will ship with OS3 as the default system. This filing is the 22 Sep general release.

PRIMARY here: rabbit’s 22 Sep 2026 newsroom post, “rabbit unveils OS3: the agentic operating system for every device,” at rabbit.tech/newsroom/rabbitos-3-launch — Tier A PRIMARY, the company’s own record. The dateline is Santa Monica, September 22, 2026. The page did not print an hour. The same-day PR Newswire release of that text is stamped Sep 22, 2026, 11:47 ET. The general release, the single chat as the entry, the outcome-in line, the cloud plus local rabbit agent, the cap of five devices, the choice of one device or several, the unified identity, the continuous conversation, Bring Your Own Key, pasting a skill URL, DLAM with the local agent for desktop software, files, web pages, and autonomous coding workflows, the local-file privacy lines, the model-provider handoff, the confirmation rule, the twelve-month upgrade line, the Lyu title and quote, os3.rabbit.tech, Telegram, iMessage, RCS, SMS, and the r1, and the cyberdeck as the default OS are the newsroom’s. The 11:47 ET stamp is the wire’s. NOT claimed: that this desk installed the agent, connected five devices, pasted a skill, timed a task, inspected rabbit’s servers, expanded DLAM, a price, a cyberdeck ship date, a ranking of “frontier,” a stock tip, or investment advice. Distinct from the already-filed viam-boxbot, unity-simulation-pro, and nvidia-isaac-ros-5.