v0.1.0 — Sovereign Agentic Collaboration Platform

Fgentic v0.1.0 — the first public cut of a sovereign, open-standard platform where humans and AI agents share Matrix rooms and @mention to delegate tasks over A2A to Kubernetes-native kagent agents, governed by agentgateway and delivered by Flux GitOps. Self-hosted end-to-end, every layer swappable, with a per-cluster choice of model backend and Matrix federation as the cross-organization destination.

⚠️ Status: early / experimental (pre-1.0). Live end-to-end on the local reference cluster, but APIs, manifests, and docs still move between milestones — see the roadmap before depending on it.

What's in this cut

• The core interaction works end-to-end. A Matrix @mention in Element produces a real LLM-backed agent reply, through the custom Go matrix-a2a-bridge → agentgateway (no agent ever holds a model key) → kagent, with conversation threading, per-sender/per-room rate limits, and sanitized failure replies.
• Governed by construction. Local LLM egress flows through a single agentgateway chokepoint with token metering and an LLM spend alert; kagent stays ClusterIP-only behind NetworkPolicy; fail-closed Kubernetes admission policies (approved agent references, no :latest, PSS retention, service-exposure limits).
• Remote & federation groundwork. An explicitly pinned remote agent round-trips only under a verified A2A v1.0 ES256 Signed AgentCard and fails closed after post-signature tampering. A provider-free federation lab (mise run fed:up) proves cross-org delegation: an org-B client-credentials JWT invokes only org A's signed docs-qa route under an azp-scoped token reservation, with room-v12 policy, server ACLs, and a git-reloadable Synapse callback border.
• Observability & supply chain. Prometheus/Grafana with bridge-delegation + GenAI-token metrics; a structurally optional, digest-pinned Trivy runtime-vulnerability layer; a multi-arch distroless bridge image built, scanned, keyless-cosign-signed, SBOM'd, and SLSA-attested by CD.
• Opt-in interop (disabled by default). Digest-pinned mautrix Slack/Telegram GitOps units and an experimental ActivityPub second-federation transport — each gated on explicit acceptance, not a compatibility claim.

Try it in 15 minutes

mise install
mise run demo:up      # deterministic, credential-free, no prompt egress

Then choose a model boundary (self-hosted vLLM, EU API, or hyperscaler) — see the provider contract.

Learn more

• Docs (specification by topic): architecture · design decisions D1–D16 · security · federation
• Contributing: CONTRIBUTING.md (issues, labels, DCO) — the milestones are the backlog.

License

Apache-2.0. The bridge embeds mautrix/go (MPL-2.0); attribution ships in NOTICE.