GurtOSat Cal Hacks 13.0

MLH: Best domain name from GoDaddy Registry

gurtos.com, a seatbelt for agents

Gurt is German for seatbelt. GurtOS is the seatbelt for AI agents: they get real access, and the OS keeps them strapped in. The name is the domain, the wordmark on the boot screen, the first slide of the deck, the docs, and what the installed OS calls itself. gurtos.com is registered at GoDaddy and runs on GoDaddy DNS.

Proof Registered at GoDaddy.com, LLC on Fri Oct 23 at 9:29 PM PT, minutes after the rename, and live the same night: gurtos.com serves the product docs and calhacks.gurtos.com serves this site, both answered by GoDaddy's nameservers.

What GoDaddy Registry asked for

From MLH's GoDaddy Registry prize, as copied into the project's track plan.

  1. Best domain name.
    Met

    One word that says what the product does. A Gurt is a seatbelt: you still drive anywhere, and a crash does not throw you out. GurtOS gives agents real access (files, the web, money) and keeps each one strapped in: its own Linux user, its own copy of the files, no keys, and an undo. Short, spellable after hearing it once, and the same string in every place the product shows its name.

  2. Register a domain through GoDaddy Registry (MLH code).
    Partly

    gurtos.com is registered at GoDaddy (registrar GoDaddy.com, LLC, IANA id 146) and uses GoDaddy's DNS (ns69 and ns70.domaincontrol.com). Its records are added through GoDaddy's API.

Screenshots

The GurtOS docs home page at gurtos.com: the GurtOS title, a one-line description, Get started, and the box home screen.
gurtos.com on Oct 24: the product documentation, with no hackathon content on purpose.
Slide 1 of the pitch deck: the GurtOS wordmark over the night wallpaper, with the tagline and the box home screen.
Slide 1 of the Figma Slides deck, with the same wordmark.
The boot screen design: the GurtOS wordmark over dusk hills and a crescent moon, with progress while the box rebuilds its tasks.
The boot screen, in the Figma design. The box shows it while it rebuilds every task from its log after a power cut.
  • gurtos.comThe product docs: install, concepts, guides, the HTTP API, security. Opens signed out.
  • calhacks.gurtos.comThis site: the hackathon write-up, kept apart from the docs.
  • RDAP record for gurtos.comThe registry's public record: registrar, registration date, nameservers. JSON.

Evidence

The registry's public record, read on Oct 24:

$ curl -s https://rdap.verisign.com/com/v1/domain/gurtos.com
registration   2026-10-24T04:29:26Z    (Fri Oct 23, 9:29 PM PT)
expiration     2027-10-24T04:29:26Z
registrar      GoDaddy.com, LLC (IANA id 146)
nameservers    NS69.DOMAINCONTROL.COM, NS70.DOMAINCONTROL.COM

$ curl -sI https://www.gurtos.com
HTTP/2 308
location: https://gurtos.com/

The timing in the project's Figma stage log: the product was renamed from "Box" to GurtOS in every Figma file between 9:27 and 9:41 PM PT on Friday, and the domain was registered at 9:29 PM PT, in the middle of that rename.

The name is one string everywhere, checked on main:

Where What it says
Boot screen and deck The wordmark: "Gurt" in Instrument Sans SemiBold, "OS" in Regular, so it reads as Gurt plus OS
The installed OS /etc/os-release has NAME="GurtOS", PRETTY_NAME="GurtOS Server <version>", ID=gurtos
The install discs gurtos-server-x86_64.iso and gurtos-personal-x86_64.iso
Each box The hostname gurt-<id>, from the box's own identity key, so two boxes never share a name
The portal The menu bar, the phone and the page title read the name from one constant
The docs NAME in site/src/product.ts; every page, title and OpenGraph image takes it from there

The docs stay hackathon-free. The docs build runs a privacy scan (site/scripts/privacy-check.mjs) that fails if any page mentions the event, a sponsor or Devpost, or names a private machine. Everything about the hackathon lives on this subdomain instead.

How it works

How it works, step by step
  1. YouSomeone types gurtos.comOr calhacks.gurtos.com, or reads the name on a box's boot screen.
  2. OutsideGoDaddy DNS answersns69 and ns70.domaincontrol.com hold every record for the domain.
  3. OutsideVercel serves the site over HTTPSThe docs at the apex, this showcase at calhacks. www redirects to the apex with a 308.
  4. YouDocs and evidence, no boxNeither site can reach a box. A box is reached only on its owner's own network.
Outside
a service outside the box
You
a person, on the portal, a phone, Jira or a chat

Both sites are static. Neither has a server that can reach a box: a box listens on its owner's own network, and pairing a phone happens with a one-time code shown on the box's screen. So the public name never becomes a way in.

Try it

  1. Open gurtos.com. The docs open with no sign-in.
  2. Check who answers for the domain: dig NS gurtos.com +short prints the two domaincontrol.com nameservers.
  3. Read the registry record: curl -s https://rdap.verisign.com/com/v1/domain/gurtos.com.
  4. On a GurtOS box, cat /etc/os-release prints NAME="GurtOS", and hostname prints gurt- and the box's id.

Live, test and simulated

PartStateDetails
gurtos.comLiveRegistered at GoDaddy.com, LLC on Oct 24, 2026 (UTC), paid through Oct 24, 2027.
GoDaddy DNSLiveThe apex, www and calhacks records point at Vercel. They are added through GoDaddy's API from the command line.
Product docs at gurtos.comLiveAstro Starlight, from site/ in the repo.
This showcase at calhacks.gurtos.comLiveAstro, from showcase/ in the repo.

Limits

  • The domain has no email (no MX records) and no DNSSEC yet.
  • A box is never reachable at gurtos.com. The name points at documentation and this write-up only.
  • The landing page is the docs site, not a Figma Sites page as first planned.
Every track