<div align="center">

<a href="https://db.zizka.ai"><img src="docs/assets/zizkadb-logo.png" alt="ZizkaDB, the operational database for AI agents: audit log, causal agent memory and compliance" width="160"/></a>

ZizkaDB

The operational database for AI agents: audit, memory and compliance

Every agent decision linked to its cause. Causal agent memory, a tamper-evident audit log and time-travel debugging,<br/> in one open-source database on Postgres. Built for EU AI Act Article 12 record-keeping.

Keyword + vector search · Drift detection · MCP server · Python & TypeScript SDKs · Self-host or cloud

[Quickstart](#quickstart-60-seconds) · [Docs](DEVELOPMENT.md) · [Integrations](#integrations-langchain-langgraph-crewai-livekit-mcp) · [Connect](CONNECT.md) · [Cloud](https://db.zizka.ai) · [Discussions](https://github.com/ZIZKA-AI-SL/ZizkaDB/discussions) · [Contributing](CONTRIBUTING.md)

<a href="https://postyourstartup.co/startup/zizkadb-1?ref=award" target="_blank"><img src="https://postyourstartup.co/api/badge/zizkadb-1/award?theme=light&week=32" alt="#1 Product of the Week on PostYourStartup" width="212" height="55" /></a>

</div>

Every agent team eventually asks: Why did it say that? Why did it call that tool? ZizkaDB links every agent step to the step that caused it, so you get the answer in one call instead of scrolling through traces. That causal record is also the agent's auditable memory for its next run, and a tamper-evident audit log you can prove was never changed: causal observability for AI agents, from debugging to compliance.

• Causal, not just traces. Each event carries a parent_id. db.why(event_id) walks back to the user message, wrong tool, or bad context that started it.
• Time-travel. db.at(agent, timestamp) rebuilds exactly what the agent knew at any past moment.
• Provable history. Every event has a checksum and is hash-chained to the one before it, so db.verify_chain(agent) proves nothing was edited, removed or reordered. GDPR deletions leave a content-free tombstone. A verifiable record for EU AI Act Article 12.
• Causal agent memory for the next run. db.context_for(agent, task) returns the relevant past as a prompt block, ranked by relevance, importance and recency; a new fact can replace an old one (supersedes). Keyword search works with no OpenAI key, hybrid with embeddings, or embed locally.
• Built database. Idempotent and batch writes, retention, export/import, read-only and expiring keys, Prometheus metrics, backup and restore scripts.
• Drift detection. See when an agent's behavior shifts from its baseline.
• Self-host or cloud. Run it on your own Postgres with one Docker command, or use ZizkaDB Cloud. AGPL-3.0, no per-trace billing; self-hosted data never leaves your infrastructure. Self-hosted runs one agent with one API key; multiple agents, agent fleets and agent-to-agent messaging are on Cloud.

In plain words: ZizkaDB is a flight recorder for AI agents. It records every step an agent takes and which step led to it, so when an agent does something unexpected, you can see exactly why.

Start here

<p align="center"> <a href="#quickstart-60-seconds"><img src="docs/assets/why-chain.svg" alt="Causal debugging for AI agents: db.why() traces a tool call back through the LLM response to the user message that caused it" width="900"/></a> </p>

Contents

• Quickstart (60 seconds)
• Self-host on a server · Deploy on Redu Cloud
• Integrations: LangChain, LangGraph, CrewAI, LiveKit, MCP
• Connect your agent
• What it does
• Audit trail and EU AI Act Article 12
• How it works
• Use with your AI assistant (MCP)
• ZizkaDB vs Langfuse, LangSmith and Mem0
• Cloud, FAQ and docs
• Contributors

Quickstart (60 seconds)

One command, one container. No repo clone, no Python, no config files.

<p align="center"> <a href="scripts/quickstart-remote.sh"><img src="docs/assets/quickstart-terminal.svg" alt="Self-hosted quickstart: one curl command starts the open-source ZizkaDB database on Postgres and prints an AI agent causal chain" width="900"/></a> </p>

1. Run it. With Docker running:

curl -fsSL https://raw.githubusercontent.com/ZIZKA-AI-SL/ZizkaDB/main/scripts/quickstart-remote.sh | bash

This pulls a single image (Postgres, the API and the dashboard together), starts it, and logs a demo agent run. After the download, startup takes a few seconds.

2. See why. It prints the causal chain behind the demo agent's tool call:

tool_call · lookup_order · ORD-8842
  └── llm_response · gpt-4o
        └── user_message · Why was my order delayed?

3. Explore. The dashboard opens on that agent, already signed in: localhost:3001/dashboard/activity?agent=support-bot. Click any event → Why? (causal) tab.

Now log your own agent: pip install zizkadb-sdk, then see CONNECT.md. The local API is http://localhost:8000 with key zizkadb_dev_local.

<details> <summary>Prefer plain <code>docker run</code>? Day-two commands</summary>

The script is a wrapper around this:

docker run -d --name zizkadb -e ENV=development \
  -p 127.0.0.1:8000:8000 -p 127.0.0.1:3001:3001 \
  -v zizkadb_data:/data ghcr.io/zizka-ai-sl/zizkadb

</details>

The single container has two modes:

• On your own machine (-e ENV=development, what the quickstart uses): one-click sign-in and a well-known API key, with the ports bound to 127.0.0.1 only.
• On a server (the default, production mode): the container generates its own secrets on first start, and the dashboard and API share port 3001. Sign in with the admin token:

  docker run -d --name zizkadb -p 3001:3001 -v zizkadb_data:/data ghcr.io/zizka-ai-sl/zizkadb
  docker exec zizkadb sed -n 's/^GEN_SELFHOST_ADMIN_TOKEN=//p' /data/secrets.env   # your admin token

Put it behind HTTPS, and set ZIZKADB_PUBLIC_URL=https://your-domain so the links it generates are correct. If a reverse proxy on the same host forwards to it, add -e TRUSTED_PROXIES=127.0.0.1,::1,172.16.0.0/12 so sign-in rate limits see each visitor.

The single container runs without Qdrant: search and context_for() use keyword search there (no setup, no OpenAI key). For vector search, use the full stack below with embeddings on.

The self-hosted dashboard is just your dashboard: no signup, no email, no account. Accounts and plans exist only on ZizkaDB Cloud.

Self-hosted is single-agent: the first agent name you log with becomes your agent, and a second name is rejected with a message naming it. The support-bot demo agent does not count. For several agents, use ZizkaDB Cloud.

Self-host from a clone

The full stack (Postgres, Qdrant, Redis, API, dashboard as separate containers) — use this for development, vector search, or production. It generates random database, Redis and Qdrant passwords on first setup:

git clone https://github.com/ZIZKA-AI-SL/ZizkaDB.git && cd ZizkaDB
bash scripts/setup-local.sh

Self-host on a server

On a machine other people can reach:

cp .env.example infra/.env
bash scripts/init-secrets.sh        # random Postgres, Redis, Qdrant and JWT secrets

Then set these in infra/.env before starting the stack:

ENV=production                      # turns off the one-click button and dev API keys
DEV_API_KEY=<random>                # must not be the default, or the API refuses to start
DEPLOYMENT_MODE=self_hosted
SELFHOST_ADMIN_TOKEN=<long-random>  # python -c "import secrets; print(secrets.token_urlsafe(32))"

Optional: EVENT_RETENTION_DAYS (delete old events), METRICS_TOKEN (Prometheus /metrics), REDACT_PATTERNS (redact emails, phones, cards before storage). Data ports stay on 127.0.0.1.

The dashboard then asks for the admin token instead of showing the one-click button. Without SELFHOST_ADMIN_TOKEN, dashboard login stays disabled. Everyone who has the token signs in to the same single owner workspace. Check your config with bash scripts/validate-selfhost-config.sh --production. Full steps: wiki/Self-Hosting.

Deploy on Redu Cloud

Redu Cloud is ZizkaDB's recommended cloud for the open-source edition. With the redu MCP added to your coding agent, ask it to "Deploy https://github.com/ZIZKA-AI-SL/ZizkaDB to redu". The agent follows redu.md: the single container on one VM, the dashboard and API on one HTTPS URL, and your data kept in a volume. Then sign in with the admin token, create your API key in Settings, and set ZIZKADB_HOST and ZIZKADB_API_KEY in your agent.

Full guide: [DEVELOPMENT.md](DEVELOPMENT.md) · Troubleshooting: wiki/Troubleshooting.md · What ZizkaDB sends: docs/telemetry.md

Integrations: LangChain, LangGraph, CrewAI, LiveKit, MCP

Works with the agent framework you already use — add one package and every step is logged with its cause.

In CI (GitHub Marketplace): ZizkaDB Why explains agent test failures in your PR, and ZizkaDB Audit proves the recorded history is intact. One step, no account: uses: ZIZKA-AI-SL/zizkadb-why-action@v1. How it works.

<p align="center"> <a href="CONNECT.md"><img src="https://cdn.simpleicons.org/python/3776AB" alt="Python" height="40"/></a> &nbsp;&nbsp; <a href="CONNECT.md"><img src="https://cdn.simpleicons.org/typescript/3178C6" alt="TypeScript" height="40"/></a> &nbsp;&nbsp; <a href="CONNECT.md#langchain"><img src="https://cdn.simpleicons.org/langchain/1C9C8C" alt="LangChain" height="40"/></a> &nbsp;&nbsp; <a href="CONNECT.md#crewai"><img src="https://cdn.simpleicons.org/crewai/FF5A50" alt="CrewAI" height="40"/></a> &nbsp;&nbsp; <a href="CONNECT.md#livekit-agents-voice"><img src="https://cdn.simpleicons.org/livekit/A970FF" alt="LiveKit" height="40"/></a> &nbsp;&nbsp; <a href="mcp/README.md"><img src="https://cdn.simpleicons.org/modelcontextprotocol/8B949E" alt="MCP" height="40"/></a> &nbsp;&nbsp; <a href="https://db.zizka.ai/swagger"><img src="https://cdn.simpleicons.org/swagger/85EA2D" alt="REST API" height="40"/></a> </p>

<table> <tr><th>Integration</th><th>Install</th><th>What you get</th></tr> <tr> <td nowrap><img src="https://cdn.simpleicons.org/python/3776AB" alt="" height="20" align="center"/>&nbsp;<a href="CONNECT.md"><strong>Python</strong></a></td> <td><code>pip install zizkadb-sdk</code></td> <td>Any Python agent</td> </tr> <tr> <td nowrap><img src="https://cdn.simpleicons.org/typescript/3178C6" alt="" height="20" align="center"/>&nbsp;<a href="CONNECT.md"><strong>TypeScript</strong></a></td> <td><code>npm install zizkadb-sdk</code></td> <td>Any JavaScript / TypeScript agent</td> </tr> <tr> <td nowrap><img src="https://cdn.simpleicons.org/langchain/1C9C8C" alt="" height="20" align="center"/>&nbsp;<a href="CONNECT.md#langchain"><strong>LangChain</strong></a></td> <td><code>pip install zizkadb-langchain</code></td> <td>Drop-in callback handler</td> </tr> <tr> <td nowrap><img src="https://cdn.simpleicons.org/langchain/1C9C8C" alt="" height="20" align="center"/>&nbsp;<a href="integrations/langgraph/README.md"><strong>LangGraph</strong></a></td> <td><code>pip install zizkadb-langgraph</code></td> <td>Every graph node logged with its parent</td> </tr> <tr> <td nowrap><img src="https://cdn.simpleicons.org/crewai/FF5A50" alt="" height="20" align="center"/>&nbsp;<a href="CONNECT.md#crewai"><strong>CrewAI</strong></a></td> <td><code>pip install zizkadb-crewai</code></td> <td>Crew logger for your agents</td> </tr> <tr> <td nowrap><img src="https://cdn.simpleicons.org/livekit/A970FF" alt="" height="20" align="center"/>&nbsp;<a href="CONNECT.md#livekit-agents-voice"><strong>LiveKit</strong></a></td> <td><code>pip install zizkadb-livekit</code></td> <td>Voice agents — one call, one session</td> </tr> <tr> <td nowrap><img src="https://cdn.simpleicons.org/modelcontextprotocol/8B949E" alt="" height="20" align="center"/>&nbsp;<a href="mcp/README.md"><strong>MCP</strong></a></td> <td><code>uvx zizkadb-mcp</code></td> <td>Ask Cursor or Claude why</td> </tr> <tr> <td nowrap><img src="https://cdn.simpleicons.org/swagger/85EA2D" alt="" height="20" align="center"/>&nbsp;<a href="https://db.zizka.ai/swagger"><strong>REST API</strong></a></td> <td><a href="https://db.zizka.ai/swagger">Swagger docs</a></td> <td>Any language</td> </tr> </table>

Click a name for its setup guide. New project? Scaffold one with zizkadb init my-agent --template basic.

Connect your agent

import asyncio
from zizkadb import ZizkaDB

async def main():
    async with ZizkaDB(host="http://localhost:8000") as db:
        user = await db.log(agent="my-bot", event="user_message", data={"text": "Why is my order late?"})
        tool = await db.log(agent="my-bot", event="tool_call", data={"tool": "lookup_order"}, parent_id=user.event_id)
        (await db.why(tool.event_id)).print()

asyncio.run(main())

<details> <summary><strong>TypeScript</strong></summary>

import { ZizkaDB } from 'zizkadb-sdk'

const db = new ZizkaDB({ host: 'http://localhost:8000' })

const user = await db.log({ agent: 'my-bot', event: 'user_message', data: { text: 'Why is my order late?' } })
const tool = await db.log({ agent: 'my-bot', event: 'tool_call', data: { tool: 'lookup_order' }, parentId: user.eventId })
;(await db.why(tool.eventId)).print()

</details>

From the terminal: zizkadb why <event_id>. Full guide: [CONNECT.md](CONNECT.md)

What it does

Audit trail and EU AI Act Article 12

Article 12 of the EU AI Act requires high-risk AI systems to automatically keep logs of what they did. ZizkaDB gives you that record:

• Checksum-backed decision logs. Every event is stored with a SHA-256 checksum over its content and audit fields (agent, session, parent, timestamp, sequence), and GET /v1/events/verify reports any row whose fields no longer match. Events are also hash-chained per agent, so GET /v1/events/chain proves no event was removed, inserted or reordered (GDPR deletions leave a content-free tombstone).
• Causally linked history. Each decision points to the event that caused it, so an auditor can follow the full chain.
• Session replay. Step through any past session event by event.
• Time-travel debugging. Rebuild exactly what the agent knew at any moment with db.at().
• Drift detection. db.baseline() flags when an agent starts behaving differently from its history.

ZizkaDB supports your record-keeping obligations; it doesn't make a system compliant on its own.

<p align="center"> <a href="https://db.zizka.ai"><img src="docs/assets/readme-hero-dashboard.png" alt="ZizkaDB dashboard: causal chain of an AI agent decision, tamper-evident audit log and agent memory" width="900"/></a> </p>

How it works

flowchart LR
    A[Your agent<br/>SDK · LangChain · CrewAI · LiveKit] -->|events + parent_id| B[ZizkaDB API]
    D[Dashboard] --> B
    M[MCP server<br/>Cursor · Claude] --> B
    B --> P[(PostgreSQL<br/>events · hash chain · keyword search)]
    B -.->|embeddings on| Q[(Qdrant<br/>vector search)]
    B --> R[(Redis<br/>cache · rate limits)]

• Postgres is the source of truth. Every event stores its parent (why() is one recursive query), its checksum and its link in the agent's hash chain. Keyword search is Postgres full-text search, so search works with nothing else installed.
• Qdrant is optional. With embeddings on (OpenAI or a local model), events are also indexed for vector search, and search becomes hybrid. Design decisions: docs/adr/.

Use with your AI assistant (MCP)

Ask Cursor or Claude "why did support-bot call lookup_order?" and get the chain back. Add this to your MCP config:

{
  "mcpServers": {
    "zizkadb": {
      "command": "uvx",
      "args": ["zizkadb-mcp"],
      "env": { "ZIZKADB_HOST": "http://localhost:8000" }
    }
  }
}

For ZizkaDB Cloud, use ZIZKADB_API_KEY instead. Setup for each client: mcp/README.md. The MCP server is MIT-licensed; everything else is AGPL-3.0 (NOTICE).

ZizkaDB vs Langfuse, LangSmith and Mem0: causality, not just traces or recall

Tracing tools such as Langfuse and LangSmith observe span trees. Memory layers such as Mem0 recall facts. ZizkaDB records why each decision happened, keeps it as auditable memory, and lets you prove the record is intact. Use it alongside a tracer if you already have one.

— means not a core feature of that category; check each tool for specifics.

<a id="more"></a>

<details> <summary><strong>Managed cloud (Pro / Team)</strong></summary>

The same features, hosted at db.zizka.ai. No Docker to maintain.

Sign up →

† Plan targets on managed cloud; not enforced in API yet. See docs/README.md.

</details>

<details open> <summary><strong>FAQ</strong></summary>

What is ZizkaDB? An open-source database built for AI agents. It records every agent action as an event linked to the event that caused it, so you can see why a decision was made (why()), what the agent knew at any past moment (at()), and prove the history wasn't changed (verify_chain()). It's the record of what the agent actually did, independent of the LLM.

Is ZizkaDB free? Self-hosting is free and open source (AGPL-3.0; the MCP server is MIT): one agent with one API key, data on your own servers. ZizkaDB Cloud is the paid managed service, with multiple agents, agent fleets and agent-to-agent message recording.

Does ZizkaDB need an OpenAI key? No. Keyword search works with no embedding provider. Semantic and hybrid search can embed locally, use OpenAI, or use your own key.

Do I need to clone this repo? No. The curl quickstart downloads config and Docker images only.

Do I need an API key locally? No. http://localhost:8000 uses a built-in dev key.

Do I need an OpenAI key? No. Logging, why(), time travel, keyword search and context_for() work without one. Add an OpenAI key, or run a local embedding model (EMBEDDINGS_PROVIDER=local with Ollama, LM Studio or vLLM), for hybrid vector search.

How is ZizkaDB different from an agent memory layer like Mem0? A memory layer stores facts to recall. ZizkaDB stores what the agent did and why, linked step by step, and serves the relevant part back as memory (context_for()). The same record is a tamper-evident audit log, so memory, debugging and compliance come from one source.

Is ZizkaDB an observability tool? It's causal observability for AI agents: instead of a span tree to read through, every event points to the event that caused it, and db.why() returns the chain. It works next to tracing tools such as Langfuse or LangSmith.

Can I use ZizkaDB as an audit log for the EU AI Act (Article 12)? Yes, as the record-keeping part: every event is checksummed and hash-chained per agent, verify_chain() proves nothing was edited, removed or reordered, and GDPR erasure leaves a tombstone. It supports your obligations; it doesn't make a system compliant on its own.

How do I prove the logs weren't changed? db.verify_chain(agent) (or GET /v1/events/chain) rechecks every checksum and link and returns the chain head. Store the head somewhere else; checking again later from that head proves nothing before it was rewritten.

My server's login page asks for an admin token. Where is it? A server install generates one on first start. Single container: docker exec zizkadb sed -n 's/^GEN_SELFHOST_ADMIN_TOKEN=//p' /data/secrets.env. Full stack: the SELFHOST_ADMIN_TOKEN you set in infra/.env. After signing in, create your API key in Settings.

Where does my data go? When you self-host, everything stays on your machine. The server and dashboard make no outside requests; the SDKs send one anonymous install ping, which ZIZKADB_TELEMETRY=false turns off. Details: docs/telemetry.md.

`zizkadb demo` says connection refused? The stack isn't running. Start it with the curl command above or bash scripts/setup-local.sh.

</details>

<details> <summary><strong>Docs & community</strong></summary>

</details>

Contributors

Thanks to everyone who has helped build ZizkaDB. Want to join? Read CONTRIBUTING.md or pick up an open issue.

<!-- CONTRIBUTORS:START --> <table> <tr> <td align="center" width="25%"><a href="https://github.com/saadamjad"><img src="https://github.com/saadamjad.png?size=120" width="64" alt="saadamjad"/><br/>_saadamjad</a></td> <td align="center" width="25%"><a href="https://github.com/Zizka-ai"><img src="https://github.com/Zizka-ai.png?size=120" width="64" alt="Zizka-ai"/><br/>_Zizka-ai</a></td> <td align="center" width="25%"><a href="https://github.com/arshadgit23"><img src="https://github.com/arshadgit23.png?size=120" width="64" alt="arshadgit23"/><br/>_arshadgit23</a></td> <td align="center" width="25%"><a href="https://github.com/rajandevkota98"><img src="https://github.com/rajandevkota98.png?size=120" width="64" alt="rajandevkota98"/><br/>_{rajandevkota98}</a></td> </tr> <tr> <td align="center" width="25%"><a href="https://github.com/Subhajitdas99"><img src="https://github.com/Subhajitdas99.png?size=120" width="64" alt="Subhajitdas99"/><br/>_{Subhajitdas99}</a></td> <td align="center" width="25%"><a href="https://github.com/saadwashmen"><img src="https://github.com/saadwashmen.png?size=120" width="64" alt="saadwashmen"/><br/>_saadwashmen</a></td> <td align="center" width="25%"><a href="https://github.com/mikeaig4real"><img src="https://github.com/mikeaig4real.png?size=120" width="64" alt="mikeaig4real"/><br/>_mikeaig4real</a></td> <td align="center" width="25%"><a href="https://github.com/aqilaziz"><img src="https://github.com/aqilaziz.png?size=120" width="64" alt="aqilaziz"/><br/>_aqilaziz</a></td> </tr> <tr> <td align="center" width="25%"><a href="https://github.com/pingkui"><img src="https://github.com/pingkui.png?size=120" width="64" alt="pingkui"/><br/>_pingkui</a></td> <td align="center" width="25%"><a href="https://github.com/AIandI0x1"><img src="https://github.com/AIandI0x1.png?size=120" width="64" alt="AIandI0x1"/><br/>_AIandI0x1</a></td> <td align="center" width="25%"><a href="https://github.com/lamenting-hawthorn"><img src="https://github.com/lamenting-hawthorn.png?size=120" width="64" alt="lamenting-hawthorn"/><br/>_{lamenting-hawthorn}</a></td> <td align="center" width="25%"><a href="https://github.com/nabeeltahirdeveloper"><img src="https://github.com/nabeeltahirdeveloper.png?size=120" width="64" alt="nabeeltahirdeveloper"/><br/>_{nabeeltahirdeveloper}</a></td> </tr> <tr> <td align="center" width="25%"><a href="https://github.com/abdurrehman616"><img src="https://github.com/abdurrehman616.png?size=120" width="64" alt="abdurrehman616"/><br/>_{abdurrehman616}</a></td> <td align="center" width="25%"><a href="https://github.com/danielhagever"><img src="https://github.com/danielhagever.png?size=120" width="64" alt="danielhagever"/><br/>_{danielhagever}</a></td> <td align="center" width="25%"><a href="https://github.com/eaz1337"><img src="https://github.com/eaz1337.png?size=120" width="64" alt="eaz1337"/><br/>_eaz1337</a></td> <td align="center" width="25%"><a href="https://github.com/HafizHamzaShahid"><img src="https://github.com/HafizHamzaShahid.png?size=120" width="64" alt="HafizHamzaShahid"/><br/>_{HafizHamzaShahid}</a></td> </tr> <tr> <td align="center" width="25%"><a href="https://github.com/mbilalzeeshan"><img src="https://github.com/mbilalzeeshan.png?size=120" width="64" alt="mbilalzeeshan"/><br/>_{mbilalzeeshan}</a></td> <td align="center" width="25%"><a href="https://github.com/nabeeltahirpsy"><img src="https://github.com/nabeeltahirpsy.png?size=120" width="64" alt="nabeeltahirpsy"/><br/>_{nabeeltahirpsy}</a></td> <td align="center" width="25%"><a href="https://github.com/AbdelazizBs"><img src="https://github.com/AbdelazizBs.png?size=120" width="64" alt="AbdelazizBs"/><br/>_AbdelazizBs</a></td> <td align="center" width="25%"><a href="https://github.com/Mephistopheles9631"><img src="https://github.com/Mephistopheles9631.png?size=120" width="64" alt="Mephistopheles9631"/><br/>_{Mephistopheles9631}</a></td> </tr> <tr> <td align="center" width="25%"><a href="https://github.com/Qalbeabbas-12"><img src="https://github.com/Qalbeabbas-12.png?size=120" width="64" alt="Qalbeabbas-12"/><br/>_{Qalbeabbas-12}</a></td> <td align="center" width="25%"><a href="https://github.com/towfiq-ul"><img src="https://github.com/towfiq-ul.png?size=120" width="64" alt="towfiq-ul"/><br/>_towfiq-ul</a></td> </tr> </table> <!-- CONTRIBUTORS:END -->

<p align="center"> _{AGPL-3.0 · MCP server MIT · Disable telemetry: <code>export ZIZKADB_TELEMETRY=false</code><br/> This repo is the open-source self-host stack. The operator console and VPC deploy live in a private repo (<a href="docs/REPO_SPLIT.md">why</a>).} </p>