---
title: "KeyKOS"
type: "entity"
entity_kind: "concept"
status: "hub"
canonical_name: "KeyKOS"
aliases: ["GNOSIS","Gnosis"]
first_seen: "2026-07-09T00:00:00.000Z"
writer_model: "claude-sonnet-5"
connects_to: ["capability-based security","confused deputy problem","Ann Hardy","Norman Hardy","Tymshare"]
seek_code_commit: "d40ee39"
---


A capability-based operating system nanokernel, originally built in-house
at Tymshare in the early 1970s under the name GNOSIS and later
commercialized, after McDonnell Douglas acquired Tymshare, by the spinoff
company Key Logic, Inc. (founded by Ann Hardy, funded by Gene Amdahl) under
the name KeyKOS. Matters to this vault as the system where Norman Hardy
developed the capability-security framing behind the "confused deputy"
problem, and as the second layer of the Hardy/Tymshare credit story: Ann
Hardy is a named co-author of the system's own 1992 architecture paper, a
credit that Wikipedia's current account of the system omits.

## References
- [[claim-hardy-1988-named-confused-deputy-compiler-billing]] — Norman
  Hardy's later capability-security work (KeyKOS's nanokernel) develops the
  same designation-plus-authority principle as the 1988 confused-deputy paper.
- [[claim-ann-hardy-keykos-coauthor-and-key-logic-founder]] — Ann Hardy
  founded Key Logic and is a named co-author of KeyKOS's architecture paper.
- [[claim-wikipedia-keykos-page-omits-ann-hardy-developer-credit]] —
  Wikipedia's current KeyKOS article omits her from the developer credit.
- [[claim-ann-hardy-gnosis-original-design-credited-to-jordan-and-norman-hardy]]
  — Ann Hardy's own account of GNOSIS's original c. 1970 design team.
- Captures: 2026-07-09-hop-confused-deputy-ai-agents,
  2026-10-30-who-was-ann-hardy-what-did-she-actually