FAIR SOURCE · GOVERNED AGENT MEMORY

The governed memory runtime for agents.

Give your agents memory they can move, merge, and prove they erased — a fast in-model working state plus a durable fact store, signed and auditable at the substrate.

135
Benchmark traces · 61,754 turns
20
Documented findings (F1–F20)
10
Conformance capabilities
1.000
M8 · reference store, all PASS
HARD_DELETE leak p=0.00 ✓ MULTI_TENANT isolation: PASS BI_TEMPORAL as-of recall ✓ ✓ CONFORMANCE PASS Ed25519-signed reports · 10 capabilities · corpus f049820b
DROP-IN FOR LANGGRAPH

Signed checkpoints. Provable deletion. Three lines.

Your LangGraph agent persists user state. A user invokes their right to be forgotten — can you prove the thread was deleted? Standard checkpointers can't. GRAFOMEM's does:

from langgraph.checkpoint.memory import MemorySaver
from grafomem_checkpoint import GrafomemSerializer, GrafomemCheckpointSaver

saver = GrafomemCheckpointSaver(
    MemorySaver(serde=GrafomemSerializer(private_key, key_id, trust, consent))
)
graph = builder.compile(checkpointer=saver)

saver.delete_thread("user-123")
receipt = saver.last_receipt("user-123")   # signed, verifiable proof of the erasure

Every checkpoint signed and tamper-evident; delete_thread yields a signed state-transition receipt — a cryptographic proof the erasure operation occurred. (Proof of the transition — not a claim of media sanitization.) ▶ 60-second demo GIF →

ARCHITECTURE

One memory system, two governed tiers.

Memory is the implementation; governance is the product.

  • Working memory (CSO)

    A fast, fixed-size in-model state M, read y = Mq. Bounded, portable, mergeable, constant-size. Adaptive state as a movable, forkable, erasable object.

  • Durable facts (GMP)

    A lossless, queryable, model-agnostic fact store. Auditable, survives model upgrades.

  • Governed at the substrate

    Signed transition receipts on the working tier, cryptographic erasure certificates on the durable tier. Both tiers, one audit surface.

TRUST

A declared capability is not an observed one.

GRAFOMEM ships an executable conformance suite (GMP): "supports capability X" means passes the test for X — two-sided, bootstrap-CI. It's how the durable tier earns trust, and the basis for signed capability reports in GRAFOMEM Cloud.

(This is a capability of the platform — not the pitch. The pitch is the runtime above.)

OPEN CORE

Open — GRAFOMEM (Fair Source)

The runtime: working memory + durable facts + governance primitives. Self-host anywhere, forever free. pip install grafomem · langgraph-checkpoint-grafomem · TS .gfm verifier.

Fair Source (FSL-1.1-Apache-2.0) — use, modify, self-host freely; only a competing managed service is restricted. The spec, .gfm format, and conformance suite are open (Apache/MIT).

Cloud — GRAFOMEM Cloud

Hosted, multi-tenant, governed: decision trail, erasure proofs, governance gateway, regulatory reports, third-party attestation. You point your registry at the cloud — a config change, not a migration.