CopilotKit's OpenBot is a self-hosted AI agent platform designed for full infrastructure ownership, running locally via Docker Compose with Bun 1.4+ and PostgreSQL (pgvector) for data persistence. It implements the AG-UI protocol, enabling framework-agnostic integration of agents built with LangGraph, CrewAI, Mastra, Pydantic AI, Google ADK, or custom endpoints, which appear as "coworkers" with isolated browser containers (Chromium on port 4100) and optional gVisor (runsc) sandboxing. The architecture centers on a Hono API server (port 3001) that acts as a mandatory gateway: every browser, file, shell, MCP, or component action resolves targets from a server-held snapshot, evaluates CEL policies (fail-closed, deny-before-allow), writes an audit row, then executes via the agent-computer service. Policies inspect tool.name, intent, bot.id, page.url, command, and initiator context; secrets are redacted from transcripts. The platform ships with two default coworkers (General Assistant, Knowledge) and ten fintech examples (expense policy check, release notes drafting, ticket triage) in examples/fintech/catalog/, deployable via agents.yaml or the /bots UI. Authentication supports Google, Microsoft, Okta, SAML, and OIDC (routed by email domain), requiring BETTER_AUTH_SECRET, TRUSTED_ORIGINS, and INITIAL_ADMIN_EMAILS; OPENBOT_SINGLE_USER=true enables admin-only access for initial setup. CopilotKit Intelligence (managed free tier or self-hosted) provides durable threads and memory via INTELLIGENCE_API_URL, INTELLIGENCE_GATEWAY_WS_URL, and INTELLIGENCE_API_KEY/CPK_INTELLIGENCE_API_KEY. Routines (15-min floor, 20 max, auto-disable after 10 failures) run via a worker process. Deployment options include a prebuilt ghcr.io/copilotkit/openbot:latest image with EMBEDDED_POSTGRES=on or custom DATABASE_URL. Admin routes (/admin/audit, /admin/boundaries, /admin/credentials, /admin/computers) govern approvals, encrypted credentials, browser/file/MCP policies, and per-user isolated computers managed by a supervisor service (port 4500 host/4300 container). Components (React, sandboxed in /admin/playground) replace prose responses; MCP connectors (Google Drive, Notion, Parallel, Exa, Firecrawl, Composio) are admin-governed. Skills are instructions invoked via '/', with a skill-creator skill enabling collaborative authoring.