What's in
the box.
Omega is 29 Rust crates, ~297K lines of code, with no vendored binaries at the runtime layer. The substrate ships as a single daemon (the "coordinator"), a thin gateway, and an edge-agent. Wasmtime 37, Firecracker 1.7, libp2p, rustls — every dependency is open and replaceable.
29 (workspace)
~297K Rust 2024
open · no BSL at runtime
coordinator · gateway · edge-agent
The properties
that matter.
The state machine. Holds the manifest, runs the scheduler, gossips substrate state. ~80K LOC. <15MB resident.
TLS termination, ACME, allowlist enforcement, resolver dispatch. ~25K LOC. <5MB resident.
The Habitat-side agent that joins the mesh. ~12K LOC. <5MB binary.
Wasmtime 37 + pooling allocator + WASI 0.2 component instantiation. ~32K LOC.
Firecracker 1.7 wrapper, snapshot/resume, vsock plumbing. ~28K LOC.
Manifest parser, validator, planner. CDDL-backed. ~22K LOC.
libp2p over QUIC, CRDT replication, gossip, mDNS/DNS-SD. ~26K LOC.
Tailscale Funnel, cloudflared, NetBird, ngrok backends. ~14K LOC.
Capability token mint, verify, revoke. OAS-aligned. ~10K LOC.
Hash-chained audit, BLAKE3 + Ed25519, optional Sigil anchor. ~8K LOC.
omega-cli (~24K), omega-sdk-rust (~16K), test harness (~30K)
What you
can rely on.
No vendored binaries at runtime
Every binary that runs in the hot path is built from source the operator can audit. The Wasmtime release we ship is the same one upstream publishes.
The whole daemon is ≤15MB resident
Omega's coordinator runs comfortably on a Pi 4. Gateway under 5MB. Edge-agent under 5MB. The substrate fits inside hardware you already own.
Runtimes are independent
omega-runtime-forge and omega-runtime-frontier are separate crates with separate threat models. A bug in one doesn't reach the other.
Every release benchmarked
Cold-start, queue-throughput, snapshot-resume, and fanout-fan-in benchmarks ride every release. Regressions are blockers.