RAXIS

Runtime Attestation eXchange for Intelligent Systems — Structural confinement kernel for autonomous AI agents.

Twelve non-negotiable invariants enforce that intelligence can't do anything authority didn't structurally permit. Isolated microVMs, cryptographic audit chains, credential proxies, fail-closed intent admission. See raxis/specs/invariants.md for the full invariant catalogue and raxis/README.md for a project-level overview.

Watch the current demo: https://www.loom.com/share/a9e5673f410542bcb09b8ce7813e240c.

Repository layout

flowchart TD
    root["Repository root"]
    root --> workspace["raxis/<br/>Rust workspace: kernel, planner-core, IPC, audit, store, dashboard backend"]
    root --> site["raxis-site/<br/>Next.js marketing site and docs browser"]
    root --> ci[".github/<br/>CI, release, spec graph, CLA check, branch protection"]
    root --> license["LICENSE + raxis/LICENSE-SSPL.txt<br/>SSPL terms"]

Loading

raxis/ is a self-contained Cargo workspace; raxis-site/ is a self-contained Next.js project that mirrors raxis/specs/ / raxis/guides/ for the public docs site at https://raxis.io.

Documentation map

Need	Start here
Install from Homebrew and run the first initiative	raxis/guides/getting-started/
Build and run a local kernel from source	raxis/guides/SETUP.md
Maintain the release / Homebrew pipeline	raxis/release/README.md
Find a focused operator recipe	raxis/guides/recipes/
Understand the security model	raxis/guides/security/raxis-security-model.md
Check invariants and specs	raxis/specs/README.md and raxis/specs/invariants.md

Install

brew tap chika5105/raxis
brew install raxis
export RAXIS_INSTALL_DIR="$(brew --prefix raxis)/share/raxis"

raxis doctor signing-key-fp
raxis doctor canonical-images --install-dir "$RAXIS_INSTALL_DIR"

Then follow raxis/guides/getting-started/02-first-initiative.md.

Building From Source

# Rust workspace
cd raxis
cargo build --workspace --locked

# Dashboard frontend
cd dashboard-fe
npm install
npm run build

# Marketing/docs site
cd ../../raxis-site
npm install
npm run dev

For a complete from-source kernel install, including host requirements, guest image baking, trust-anchor embedding, and macOS code signing, use raxis/guides/SETUP.md and raxis/specs/v2/system-requirements.md §9.

The .github/workflows/ jobs run from the repository root with working-directory: raxis for Rust steps and from raxis-site/ for the site build — no path rewriting needed.

License

SSPL-1.0. See LICENSE (the SSPL header) and raxis/LICENSE-SSPL.txt (the full SSPL text).

Contributions require sign-off via the project CLA: see raxis/CLA.md. Every pull request opens with the .github/PULL_REQUEST_TEMPLATE.md which contains a CLA-agreement checkbox; the cla-check workflow verifies the box is ticked and is a required status check on main (see .github/scripts/protect-main.sh).

Provenance

This repository was split out of chika5105/aegis-ai on 2026-05-14 to give RAXIS its own independent repository identity. The raxis/ and .github/ history was migrated verbatim with git filter-repo (preserving the main branch only); raxis-site/ was joined as a git subtree so its 28 commits are fully reachable under that prefix. The original chika5105/aegis-ai repository remains in place as a read-only fallback.