OPEN SOURCE · GOVERNED AGENT MEMORY

The runtime for the Agent Economy.

Governed memory, verifiable decisions, and reputation earned from real outcomes.

135
Benchmark traces · 61,754 turns
20
Documented findings (F1–F20)
10
Conformance capabilities
1.000
M8 · reference store, all PASS
HARD_DELETE leak p=0.00 ✓ MULTI_TENANT isolation: PASS BI_TEMPORAL as-of recall ✓ ✓ CONFORMANCE PASS Ed25519-signed reports · 10 capabilities · corpus f049820b
DROP-IN FOR LANGGRAPH

Signed checkpoints. Provable deletion. A few lines.

Your LangGraph agent persists user state. A user invokes their right to be forgotten — can you prove the thread was deleted? Standard checkpointers can't. GRAFOMEM's does:

from langgraph.checkpoint.memory import MemorySaver
from grafomem_checkpoint import GrafomemSerializer, GrafomemCheckpointSaver

saver = GrafomemCheckpointSaver(
    MemorySaver(serde=GrafomemSerializer(private_key, key_id, trust, consent))
)
graph = builder.compile(checkpointer=saver)

saver.delete_thread("user-123")
receipt = saver.last_receipt("user-123")   # signed, verifiable proof of the erasure

Every checkpoint signed and tamper-evident; delete_thread yields a signed state-transition receipt — a cryptographic proof the erasure operation occurred. (Proof of the transition — not a claim of media sanitization.) ▶ 60-second demo GIF →

ARCHITECTURE

One memory system, two governed tiers.

Memory is the implementation; governance is the product. Reputation earned from real outcomes is the third pillar.

  • Working memory (CSO)

    A fast, fixed-size in-model state M, read y = Mq. Bounded, portable, mergeable, constant-size. Adaptive state as a movable, forkable, erasable object.

  • Durable facts (GMP)

    A lossless, queryable, model-agnostic fact store. Auditable, survives model upgrades.

  • Governed at the substrate

    Signed transition receipts on the working tier, cryptographic erasure certificates on the durable tier. Both tiers, one audit surface.

TRUST

A declared capability is not an observed one.

GRAFOMEM ships an executable conformance suite (GMP): "supports capability X" means passes the test for X — two-sided, bootstrap-CI. It's how the durable tier earns trust, and the basis for signed capability reports in GRAFOMEM Cloud.

(This is a capability of the platform — not the pitch. The pitch is the runtime above.)

REPUTATION

Verify the agent, not just the answer.

Conformance proves a memory backend does what it claims. CGR — Capability-Grounded Reputation — proves the same for the agents on top of it: each earns a reputation, per domain, from decisions that later resolve right or wrong. It can't simply be bought or declared — reputation accumulates through resolved outcomes, and peer influence is gated by demonstrated calibration.

  • Grounded in resolved outcomes

    A score moves only when a decision is checked against what actually happened — never on assertion, confidence, or volume.

  • Confidence travels with the score

    Every score carries its evidence mass, so a lucky first call never reads like an established track record.

  • Sybil-resistant by construction

    Peer review counts only as much as a reviewer's calibration, itself earned on verifiable outcomes; unknown reviewers fail closed, so fresh identities buy nothing.

What is Capability-Grounded Reputation? →  ·  Read the CGR spec →

reputation resolved decisions → τ gate score ↑ · n ↑ resolved outcomes peer review · gated
OPEN CORE

Open — GRAFOMEM (MIT)

The runtime: working memory + durable facts + governance primitives. Self-host anywhere, forever free. pip install grafomem · langgraph-checkpoint-grafomem · TS .gfm verifier.

The GRAFOMEM runtime is open source under the MIT license; the GMP spec is open.

Cloud — GRAFOMEM Cloud

Hosted, multi-tenant, governed: decision trail, erasure proofs, governance gateway, regulatory reports, third-party attestation. You point your registry at the cloud — a config change, not a migration.