Show HN: Maat – AI agents that can diagnose Ubuntu but can't change it (github.com)

Maat is a new open-source Model Context Protocol (MCP) server designed for diagnosing Ubuntu systems through AI agents while ensuring system integrity by not allowing any changes to the system without user approval. It utilizes a strictly confined snap environment, enabling the agents to read system states but not alter them or access the network. Each proposed fix is turned into a typed, reviewable plan that must undergo user confirmation through the existing polkit authentication system, creating a transparent and auditable process for troubleshooting. This tool's significance lies in its approach to safely integrating AI into systems administration, addressing the security risks posed by allowing AI full access to system commands. Maat enhances the auditing process by generating a tamper-evident log of all actions, while also making system logs more interpretable for AI models. Early tests demonstrated that models like gpt-oss and qwen3 could effectively identify issues and apply some fixes, indicating promising capabilities for future development. Maat aims to balance the need for advanced troubleshooting tools with the critical requirement of system security, fostering trust within the AI and ML community as they explore the integration of AI into sensitive environments.