local-first infrastructure for agents you can inspect, constrain, reproduce, and trust.
modular tools. one trust model. no required cloud.
| tool | what it does | lang | stars |
|---|---|---|---|
| forge | incubator — local agent runtime and emerging umbrella for Valtors components. | Go |  |
| relay | active — local MCP data plane for files, images, PDFs, web, and workflows. Some tools make explicitly requested network/API calls. | Go |  |
| observer | incubator — local MCP tracing proxy and SQLite event store. | Go |  |
| cairn | incubator — embedded temporal memory for local agents in one SQLite file. | Rust |  |
| smith | incubator — MCP package resolution and composition; planned to become Forge supply-chain infrastructure. | Rust |  |
| vault | experimental — policy and audit utilities; not currently an OS isolation boundary. | Go |  |
| pulse | experimental — local notification triage agent. | Go |  |
| reflow | maintained separately — SSR-safe responsive toolkit for multi-framework TypeScript design systems. | TS |  |
| mcprobe | security scanner for MCP servers. detect injection patterns, find tool shadowing, baseline for drift. | Go |  |
- userelay (npm) -
- usereflow (npm) -
- smith-mcp (crates.io) -
- cairn-memory (crates.io) -
- open source - license terms are documented in each repository
- data minimization - no telemetry by default; network behavior and optional providers are documented per tool
- boring tech - go stdlib, sqlite, json. no frameworks you can't audit
- local-first - your data stays on your machine
- human-in-the-loop - agents assist, humans decide
Start with the repository README and lifecycle status. Use Discussions for early ideas and Issues for reproducible bugs. Read the organization-wide contribution and security policies before opening a PR.
MIT. everything. always.