Aivyx PA and aivyx-coder are built from shared parts — the sandbox, undo, the injection check, model routing and more — as small Rust crates. Each is its own source-available repo (BUSL-1.1): read it, or use it in a non-commercial project.
On Linux, Landlock filesystem rules plus a seccomp syscall filter, applied to each shell or git command before it starts. A command stays inside the project, can't read denied files or reach local daemons, and is stopped when its tool call ends.
Used by: Aivyx PA, aivyx-coder
GitHub ↗Snapshots your files to a hidden git ref before each change, so any action can be rolled back — without touching your branch, your index or your HEAD.
Used by: Aivyx PA, aivyx-coder
GitHub ↗Scans web pages, files and command output for text trying to take over the agent. A match is flagged for your review instead of being quietly obeyed.
Used by: Aivyx PA, aivyx-coder
GitHub ↗Hardware-backed Ed25519 signing through the YubiKey's OpenPGP applet. The key never leaves the card, and every signature needs a physical touch.
Used by: Aivyx PA (optional)
GitHub ↗A small, storage-agnostic memory store for what an agent should still know next time — capped per topic so it never grows without limit.
Used by: aivyx-coder
GitHub ↗Saves and restores llama-server's KV cache for a stable prompt prefix, so resuming a session doesn't pay to process the same prompt again.
Used by: Aivyx PA, aivyx-coder, aivyx-broker
GitHub ↗A loopback daemon in front of llama-server that hands its slots out fairly to several local processes and keeps each one's cache warm, instead of letting them collide.
Used by: A daemon Aivyx PA and aivyx-coder can both use
GitHub ↗Matches what a request needs — tools, vision, context size, the kind of task — against the models you have, explains its choice, and treats anything not on your own machine or network as cloud.
Used by: Aivyx PA, aivyx-coder
GitHub ↗Small instruction packages an agent loads when a task calls for one. A default set ships with both products.
Used by: Aivyx PA, aivyx-coder
GitHub ↗SVG drawn by the agent's own model and sanitised before it's returned — no scripts, no CSS, nothing fetched from elsewhere — plus local image generation, inpainting, upscaling and 3D models, with previews the agent can look at to check its work.
Used by: Aivyx PA, aivyx-coder
GitHub ↗The signed bundle format behind packs, and the command publishers build and sign them with. Both products verify a pack with the same code before they install it, and refuse one whose signature or contents don't match.
Used by: Aivyx PA, aivyx-coder
GitHub ↗Turns an agent's tool list into a grammar the model server enforces, so a small local model can only answer with a well-formed call to a real tool, or plain text. It lives in the aivyx-toolbench repo beside the benchmark that measures it.
Used by: Aivyx PA (optional)
GitHub ↗All of them live under Aivyx-Agent on GitHub.