Rabbit announced the general release of OS3 on September 22, 2026. The product takes the companyâs approach to personal AI beyond its r1 device: users give instructions in a chat, while a cloud-based system coordinates AI models and connected devices to carry them out.
Rabbit says an OS3 account can connect up to five devices, choose where a task runs, and move work between them. Users can also supply their own model API keys. If those pieces work reliably together, OS3 could make a personal agent useful across a personâs existing computers instead of tying it to one gadget.
The launch announcement is the evidence for the broadest claims. It describes what Rabbit intends OS3 to do but provides no independent results showing how often complex, multi-device tasks succeed.
OS3 Runs in the Cloud, Not in Place of Your Computerâs OS
Despite its name, OS3 does not replace Windows, macOS, or Linux. Rabbit describes it as a cloud-based agentic operating system that reaches computers through a locally installed Rabbit agent. The company says installation takes a single command.
A request starts in the chat interface. OS3 coordinates the task, and an agent on a connected machine gives it a way to work with local software and files. Rabbit says the system can also call on a selected AI model, the web, and services the user already uses. The computerâs existing operating system still controls the machine and grants system-level permissions.
Rabbit lists local Windows, Mac, and Linux computers, cloud virtual machines, dedicated AI computers, and the r1 among the devices OS3 can work with at launch. Listing an endpoint does not establish that every application on it will be controllable, or that a task can move between unlike machines without intervention. Compatibility and execution remain separate questions.
One Conversation Can Reach Several Devices
OS3 replaces separate chat threads with what Rabbit calls one continuous conversation. The company says it can recall earlier instructions and outputs while working on tasks in the background. Rabbit also says OS3 decides whether a request belongs on one connected device or requires several, without asking the user to pick a computer first.
Consider a request involving a file on a laptop and a software workflow on a cloud VM. OS3 is designed to determine which machine needs to act and coordinate the steps through their agents. That is the practical meaning of Rabbitâs multi-device claim; it does not mean every device runs the same model or that all work happens locally.
The five-device limit is clear in the announcement. The quality of the handoffs is harder to judge. Rabbit does not publish an end-to-end success rate, task-routing methodology, or examples that would let readers assess how much intervention a difficult workflow requires. For an agent meant to act across machines, those details matter more than the maximum device count.
A phone can provide access to the OS3 chat interface without becoming a computer-control endpoint. Rabbitâs stated route to operating a machine is the local agent.
Users Can Change Models Without Changing the Conversation
Rabbit says OS3 supports bringing a userâs own model API key, including keys from AI providers and model-routing services. It also says locally hosted models can be connected. According to the company, users can switch models while keeping their conversation context, memory, and skills.
That would offer more choice than a personal agent tied permanently to one model. OS3 itself remains cloud-based, however. Choosing a locally hosted model does not establish that orchestration, conversations, or memory remain on the userâs computer.
The company makes a broad claim about skills, too: paste the URL of a published skill into chat, and OS3 will set it up without additional command-line configuration. Rabbit describes this as universal compatibility. Without independent testing across skill formats in the announcement, âevery skillâ remains Rabbitâs claim, not a demonstrated guarantee.
Instructions obtained from an outside URL may affect what an agent attempts to do with its tools. Users relying on that workflow would need to understand how OS3 evaluates a skill and which actions still require approval. The launch announcement does not answer those questions in detail.
Direct Computer Control Is the Hardest Claim to Judge
Rabbit says OS3 combines its DLAM technology with the local agent to operate desktop applications, local files, and web pages. It also claims the system can write, debug, and run software workflows. Doing that takes more than producing a plausible chat response: the agent must select the right machine, interpret the state of an application, carry out actions, and handle failures.
The announcement provides no independent evaluation of that complete chain. It does not establish how OS3 performs across different desktop applications, how often it recovers from an unexpected screen, or whether a coding task works reliably without human correction. Rabbitâs description of âautonomousâ coding is not a measured performance result.
Rabbit also places a limit on that autonomy. It says OS3 acts in response to user instructions and does not start tasks on its own. Background work appears to mean continuing an initiated task, rather than deciding independently to begin a new one. Sensitive actions require confirmation, the company says, though the announcement does not define every action in that category.
Files Stay Local, but Task Content Can Travel
Rabbitâs description of OS3âs data handling distinguishes between a file and the content needed to process a task. The company says the local agent does not copy, store, use, or sell files from a userâs computer, and that files remain there. Conversations and the memory built from them are stored on Rabbitâs servers.
When a task requires model processing, relevant content first passes through Rabbitâs servers, along with prompts needed for the task, before going to the userâs chosen model provider. Rabbit says it does not keep a copy of that task content; the provider handles it under its own terms. Supplying an API key does not remove Rabbit from the data path.
A document can remain as a file on a laptop while text taken from it is processed in the cloud. Rabbitâs statement that files remain local is not a promise that nothing from those files leaves the device.
Rabbit says operating-system permissions are requested locally, sensitive actions require confirmation, and users can revoke permission. Those boundaries are vendor assertions, not the results of a published security audit. People considering OS3 for confidential files should assess both Rabbitâs cloud handling and the terms of any model provider they connect.
OS3 Is Available Beyond the R1, With Open Questions
Rabbit says users can begin through its OS3 website on a desktop, then use the web portal on desktop or mobile. The company also lists a paired Telegram account, iMessage, RCS, SMS, and the r1 as ways to send requests. Its planned cyberdeck device is expected to ship with OS3 as its default operating system.
Frequently Asked Questions
4 questions
1Is Rabbit OS3 a Replacement for Windows, macOS, or Linux?
No. OS3 is Rabbitâs cloud-based agentic system, not an operating system installed in place of Windows, macOS, or Linux. Rabbit says a local agent lets OS3 act on a connected computer while the computerâs existing operating system retains control of system permissions. Users provide instructions through a chat interface.
2
Sources
- announced the general release of OS3rabbit.tech
