Open source tools you actually control.
sphragis-oss builds self-hosted, trust-first software: nothing leaves your machine and no code runs unless you explicitly allow it. Every project carries an ancient Greek name for the thing it actually is: the seal, the chorus leader, the board.
sphragis · σφραγίς, the seal
The EU AI Act compliance gateway: a single Go binary that sits between your apps and any OpenAI- or Anthropic-compatible LLM, with first-class support for Claude Code. It strips personal data out of every request before it leaves your network and writes a tamper-evident, hash-chained audit log. If the audit write fails, the call is not forwarded. The seal pressed into wax proved a document untampered; that is exactly what sphragis verify does.
# point any client at the gateway; PII is tokenized before it leaves the machine
export SPHRAGIS_UPSTREAM_BASE_URL=https://api.anthropic.com
sphragis serve # listens on :8787
export ANTHROPIC_BASE_URL=http://localhost:8787 # Claude Code now runs through it
# later: prove the audit log was never altered
sphragis verify ~/.sphragis/audit.jsonl
# OK: 42 records, chain intactchoragos · χορηγός, the chorus leader
A secure multi-agent coding orchestrator. Choragos runs a team of AI coding agents in its own TUI with PTY panes and routes every agent's LLM traffic through sphragis, so the whole chorus gets local PII redaction and a tamper-evident audit trail by construction. The choragos led and funded the chorus; here it leads a chorus of agents.
pinax · πίναξ, the board
A config-driven, LLM-buildable dashboard framework for Obsidian: tables, kanban boards, heatmaps, stats and forms on top of the notes you already have, all from a single profile.json. Trust is a per-profile boundary: web embeds, command buttons, note writing and custom widget code are separate toggles, all off by default, and an imported profile never inherits trust you granted another. Ready-made dashboards live in pinax-profiles.
| Repository | Description |
|---|---|
sphragis |
Core gateway: proxy, PII/secret redaction, hash-chained audit log, verify and anchor |
choragos |
Multi-agent coding orchestrator with enforced compliance routing through sphragis |
pinax |
Dashboard framework for Obsidian: live, trust-gated, built from one profile.json |
pinax-profiles |
Community dashboard profiles for pinax, zero trust on import |
homebrew-sphragis |
Homebrew tap for installing the sphragis CLI on macOS |
sphragis.eu · open source · built in the open
