Open-source infrastructure for building reliable, governed, self-hostable AI-agent systems.
A suite of composable, self-hosted building blocks for AI agents — persistent memory, multi-agent orchestration, governance and runtime security, an agent data plane, and the developer tooling that ties them together — plus a working assistant assembled from them. Everything runs on your own infrastructure.
| Repo | What it does |
|---|---|
| bulletproof-memory | Persistent, tiered memory for AI agents — an MCP server with semantic recall over Qdrant + Postgres. Includes the web dashboard and the turnkey stack. |
| bulletproof-process-knowledge-mcp | MCP server exposing a process-knowledge Qdrant collection: semantic query, exact lookup, record validation. |
| Repo | What it does |
|---|---|
| bulletproof-conductor-kernel | Domain-agnostic multi-agent orchestration kernel: tier classification, agent dispatch, gate enforcement, state persistence. |
| bulletproof-conductor-dev | The dev-domain workflow orchestrator built on the kernel — tiered pipelines with programmatically enforced verification gates. |
| bulletproof-event-router | Central event router: validate, route, and dispatch events to n8n webhooks, state, and actions, with a dead-letter queue. |
| bulletproof-metrics-engine | Outcome metrics and predictive scaling from an event stream. |
| Repo | What it does |
|---|---|
| bulletproof-governance-plugin | Agent governance framework: identity manifests, trust broker, audit bus, policy engine, memory governor. |
| bulletproof-runtime-security | Runtime security + SOC2 evidence for agents: identity, behavioral monitoring, threat detection, memory integrity. |
| bulletproof-codehardener | Code assurance platform: multi-tool security scanning, quality scoring, and hardening (MCP + dashboard). |
| bulletproof-validation-gate | A Claude Code Stop hook that adversarially verifies completion claims and blocks unsupported "done" claims. |
| bulletproof-compliance-portal | Compliance & governance portal: DSR management, audit explorer, evidence packages, gate decisions, regulatory reports. |
| bulletproof-compliance-service | Compliance backend: source-of-truth compliance data, JWKS signing, tamper-evident audit chain. |
| bulletproof-compliance-jobs | Scheduled compliance jobs: data retention, DSR cascades, Merkle-chained audit signing. |
| Repo | What it does |
|---|---|
| bulletproof-a2a-gateway | Agent-to-agent gateway: authenticated, rate-limited, audited capability invocation with an MCP bridge. |
| bulletproof-agentic-data-plane | A governed data plane for agents: GraphQL + REST with classification, access control, and audit. |
| bulletproof-conductor-data-pipeline | Data pipeline with masking/anonymization, JSON-schema contracts, lineage, and human approval gates. |
| bulletproof-agent-economics | Cost metering, budget enforcement, model routing, and chargeback for multi-agent systems. |
Where the building blocks above are assembled into something you can actually talk to.
| Repo | What it does |
|---|---|
| bulletproof-monet | A self-hostable personal AI assistant reachable over Telegram: tiered memory, a prompt-injection gate and audit trail, a webhook receiver, background jobs, and an opt-in daily briefing. Bundles the memory MCP server; voice output uses Microsoft edge-tts (no API key). |
| Repo | What it does |
|---|---|
| bulletproof-context-guard | Claude Code plugin: context-window monitor with 4-tier escalation and a 5-compartment usage MCP server. |
| bulletproof-markdown-for-agents | Self-hosted HTML→Markdown proxy that serves clean, agent-ready content. |
| bulletproof-prd-platform | Full-stack PRD platform: brainstorm, create, and review product requirement documents. |
| bulletproof-design | Self-hosted brand & design asset library: components, icons, guidelines, brand tokens. |
| bulletproof-docs-portal | Minimal web app to browse and PDF-export project documentation. |
Most services are self-hostable via Docker and ship with an .env.example and a
README. The memory system
is a good place to start — one clone + ./install.sh brings up the full stack.
All repositories are licensed Apache-2.0.