Skip to content
@krizaka

Krizaka

Open-source building blocks and two products: Orazaka, sovereign AI on your own machines, and Orochia, the video platform where creators keep 90%.
Krizaka

Krizaka

Open source. Closed to compromise.

We build what others take years to get right — AI that never leaves your walls, a video platform that pays every cent exactly once, a dating app where you talk first. Compliance and security aren't add-ons: they're compiled in.

Website · Products · Docs · Open source · Roadmap · Contact

Public repositories License Maven Central npm Last release


Orazaka

The AI that never leaves home.

A multimodal AI orchestration engine — chat, RAG, agents, image, audio, video — where every request crosses a deterministic interceptor pipeline to the best local model. Your documents, your models, your network: nothing leaves it. Law 25 and GDPR by design. One command, orazaka demo seed, sets up Eric's day on your own machine.

Workspace · Docs · How it works · Demos

Orochia

Creators get paid. Every cent, exactly once.

The creator video platform: direct-to-CDN 4K streaming, an Explorer that is never empty, complete stories (sound, likes, tips, private replies), audiences the creator chooses, auctions and challenges paid in credits held in escrow until delivery. Creators keep 90 %, settled once on a double-entry ledger. Built-in 18+ compliance — on the web and on iOS and Android (orochia-mobile).

Try it · Repository · Docs · Video tour

Yazakia coming soon

The dating app where you talk first.

No swipe, no catalogue, no score. An AI agent gets to know you, then opens a small batch of people who match you in both directions — with reasons, never a score — and the next batch learns from your debrief. iOS and Android, built on the Krizaka blocks, with Orazaka as its AI engine.

Coming soon · Repository · Mobile app · Get notified

Yororis under construction

A listening space with a face and a voice.

Powered by Orazaka's wellbeing pack: an AI presence that listens, reflects back and stops — a set length, a set number of moments, and what it keeps is a three-line summary, not a transcript. We are building it in the open and studying its framework — legal, ethical, clinical — before anything is offered. Nothing is online, and there is no date.

Orazaka's web client, signed in as Eric: a customer's return request answered from his own returns policy, then a product photo generated locally Orochia on the real app: Alex, a fan, supports Elena, a creator, who sees it arrive and keeps 90 %
Orazaka — Eric answers a customer from his own documents, then generates the product photo. Everything ran on one Mac. More demos Orochia — Alex, a fan, supports Elena, a creator; she sees it arrive and keeps 90 %. Recorded on the real app. Elena's and Alex's day

Start here

You want to… Go to
See the products krizaka.com/products · Orochia running: dev.orochia.com · Orazaka: demos · Yazakia: coming soon
Read the docs One place, krizaka.com/docs: Orazaka · Orochia · UI components · Java building blocks
Run Orochia locally krizaka/orochia — npm run setup && npm run dev (Node ≥ 20, Docker)
Run Orazaka locally krizaka/orazaka — clones every component; the orazaka CLI does install → start → dev, and orazaka demo seed loads the demo
Understand the architecture Orazaka, interactive · Orochia docs
See where we are going Roadmap — milestones and dates · live board: Krizaka Roadmap
Contribute Contributing · good first issues in each repository · Code of conduct
Report a vulnerability Privately — Security policy
Talk to the team krizaka.com/contact · GitHub Discussions in each product repository
Support the work Star, contribute, sponsor

Built with

What the repositories actually run — each badge is a dependency you can find in a pom.xml, a package.json, a requirements.txt or a workflow.

Layer Stack
Backend Java 21 Spring Boot 4 Node.js Drizzle ORM Zod OpenTelemetry
Data & messaging PostgreSQL + pgvector RabbitMQ Redis
AI, on your machines Spring AI 2 Ollama LocalAI Hugging Face Diffusers PyTorch MLX
Web Next.js 16 React 19 TypeScript Tailwind CSS v4 Fumadocs Apache ECharts
Mobile React Native Expo
Delivery Docker GitHub Actions Bunny.net DigitalOcean Vercel Maven Central npm
Quality JUnit 5 ArchUnit Testcontainers Vitest Jest Dependabot

What we master — check it yourself

Claims are cheap; each line below links to the file that proves it.

We say Where to check
Hexagonal architecture, enforced at build time. Layer boundaries are ArchUnit rules: a core class that reaches for the web layer, the router or a Spring Boot starter fails the build. CodeRules.java · LayerBoundaryTest.java
Messages are never lost. A transactional outbox writes the event with the data; consumers retry, then park the message in a dead-letter queue. outbox/ · ConsumerRetryProperties.java
One error format. Every API answers errors as RFC 9457 Problem Details, with a correlation id. ProblemDetailsAdvice.java
Money moves exactly once. Payments are confirmed by the gateway's signed webhook (constant-time check), settled under a row lock on a double-entry ledger — never by the client. webhook route · signature.ts · intents.ts
Real time without a broker to pay for. Server-Sent Events fed by PostgreSQL LISTEN/NOTIFY across every app instance. realtime.ts · listen.ts
Sovereign AI. Chat, RAG, agents, images and audio on local models, behind a deterministic interceptor pipeline — nothing leaves your network. Interactive architecture · orazaka-ai-engine
Documentation generated from the code. API contracts, database references, architecture maps and component pages cannot drift. generate-docs.mjs · gen-ui-docs.mjs · krizaka.com/docs
Debt only goes down, in two languages. UI debt counters sit at zero and CI fails if one rises; every string exists in English and French, checked in CI; every feature has end-to-end scenarios over the real API. lint-ratchet.json · krizaka-ratchet · @krizaka/i18n · e2e/scenarios.mjs

Pick only what you need

Every product is built on Krizaka building blocks — open-source components any application can take on its own, published on Maven Central and npm. The products consume them; they do not own them.

Layer Repositories
Building blocks (Java, com.krizaka) krizaka-build — parent POM, BOM, test kit · krizaka-platform-kit — web, security, messaging, observability and their Spring Boot starters · krizaka-users — sign-up, sign-in, OAuth, profiles, API keys · krizaka-notifications — e-mail, SMS, webhooks · krizaka-billing — credits, plans, metering
Building blocks (TypeScript, @krizaka) krizaka-ui — tokens, Tailwind preset, primitives, marks, icons, fonts, charts, i18n, real time, push and shared config for every Krizaka interface
Orazaka — foundation orazaka-build · orazaka-contracts · orazaka-edge · orazaka-ui-kit
Orazaka — AI engine orazaka-studio · orazaka-ai-engine · orazaka-conversation-service · orazaka-job-service · orazaka-knowledge-service · orazaka-automation-service · orazaka-worker-media
Orazaka — applications orazaka-web-client · orazaka-web-admin · orazaka-mobile-client · orazaka-cli · orazaka-packs
Orochia orochia · orochia-admin · orochia-design-system · orochia-mobile
Yazakia yazakia — API, agent, matching, legal pages · yazakia-mobile — the iOS and Android app
Site & organisation krizaka-com · .github — this profile, community defaults and the shared Maven pipeline

Clone the whole Orazaka platform — building blocks included — with krizaka/orazaka.

Artifacts on Maven Central

Maven Central

Import the BOM once, add a starter, and every com.krizaka artifact resolves to one coherent release — 0.2.0 is out, signed (B523D2E9DE35AE17882361BE25DF268F9213EB5D, on keyserver.ubuntu.com).

Artifact Version What it is
com.krizaka:krizaka-bom 0.2.0 Every Krizaka artifact at one version — changes no third-party version
com.krizaka:krizaka-spring-boot-starter-web · -security · -rabbitmq · -observability 0.2.0 One dependency each: the module below and its auto-configuration
com.krizaka:krizaka-web 0.2.0 RFC 9457 problem details, the correlation id, pagination and JSON written once
com.krizaka:krizaka-security 0.2.0 Local session-JWT verification, the baseline every filter chain starts from, SERVICE tokens
com.krizaka:krizaka-messaging 0.2.0 Events with their envelope in AMQP headers, a transactional outbox, atomic deduplication, retry and dead-letter topology
com.krizaka:krizaka-observability 0.2.0 Traces, metrics and structured logs on OpenTelemetry and Micrometer
com.krizaka:krizaka-test-support 0.2.0 ArchUnit code rules, configuration-binding checks and Testcontainers helpers
com.krizaka:krizaka-parent 0.2.0 The parent POM: Central metadata, Java 21 conventions, the signed release
com.krizaka:krizaka-users-api · -client · -core · -persistence 0.1.0 User management as a contract, a typed client, or a library
com.krizaka:krizaka-notifications-api 0.1.0 Request an e-mail, SMS or webhook notification
com.krizaka:krizaka-billing-api · -client 0.1.0 Credits, entitlements and metering as a contract and a typed client

Note

The 0.2.0 BOM already manages users, notifications and billing at 0.2.0, but those are published at 0.1.0 — their 0.2.0 ships in November. Until then, declare them with <version>0.1.0</version>.

A service with the starters:

<dependencyManagement>
  <dependencies>
    <dependency>
      <groupId>com.krizaka</groupId>
      <artifactId>krizaka-bom</artifactId>
      <version>0.2.0</version>
      <type>pom</type>
      <scope>import</scope>
    </dependency>
  </dependencies>
</dependencyManagement>

<dependencies>
  <!-- problem details, correlation id, pagination -->
  <dependency>
    <groupId>com.krizaka</groupId>
    <artifactId>krizaka-spring-boot-starter-web</artifactId>
  </dependency>
  <!-- session JWT and SERVICE tokens -->
  <dependency>
    <groupId>com.krizaka</groupId>
    <artifactId>krizaka-spring-boot-starter-security</artifactId>
  </dependency>
  <!-- outbox, deduplication, retry / DLQ -->
  <dependency>
    <groupId>com.krizaka</groupId>
    <artifactId>krizaka-spring-boot-starter-rabbitmq</artifactId>
  </dependency>
  <!-- published at 0.1.0 until November: pin it -->
  <dependency>
    <groupId>com.krizaka</groupId>
    <artifactId>krizaka-users-client</artifactId>
    <version>0.1.0</version>
  </dependency>
</dependencies>

All artifacts → · Java docs · How they fit together

Packages on npm

Every interface is built from layers published on the public npm registry — no account or token to install. Releases are published by the team from a reviewed main; provenance attestations come once trusted publishing is configured.

Package What it is
@krizaka/ui The platform's components: the brand marks, web primitives, layouts and motion on the --kz-* tokens, their React Native counterparts, the mascots and section backdrops
@krizaka/tokens The semantic design tokens and one theme per brand — CSS (dark, light), typed constants, React Native themes
@krizaka/tailwind The Tailwind CSS v4 preset: the tokens as utilities
@krizaka/icons The signature icons, one drawing language — React and React Native
@krizaka/fonts The three typefaces of every interface — display, text, mono — self-hosted, SIL OFL, for the web and Expo
@krizaka/charts Typed, declarative charts on Apache ECharts and the --kz-* tokens — a data table, a written summary and keyboard navigation in every chart; React Native for the simple types
@krizaka/intl Money, numbers, dates and plurals formatted the same way everywhere — money from integer minor units only
@krizaka/i18n Typed messages, format(), <Rich>, a React provider and the krizaka-i18n catalogue checker
@krizaka/realtime Server-Sent Events behind one bus — PostgreSQL LISTEN/NOTIFY by default, Redis when traffic asks for it — and presence without a write per heartbeat
@krizaka/push Mobile push without an SDK: Expo relays to FCM and APNs from one HTTP call — batched, never throws, reports the dead tokens to forget
@krizaka/config ESLint, tsconfig and Prettier for every repository, and krizaka-ratchet, the UI debt counter
@krizaka/orochia-design-system Orochia's identity on the platform: its theme and product composites (live badge, social icons)
@krizaka/orazaka-design-system Orazaka's identity on the platform: the Orazaka Orange theme and product composites (chat showcase, icon registry)
@krizaka/orazaka-shared Orazaka's contracts — TypeScript types, Zod schemas and design tokens

Component docs → · All packages · How they fit together

How we work

  • One contract per product. Every repository carries an AGENTS.md — the rules its code must keep (architecture, security, compliance) — that humans and AI agents follow alike.
  • Documentation generated from the code. API contracts, database references, architecture maps and the component docs — live previews and prop tables read from @krizaka/ui itself — are extracted from the sources and published on krizaka.com/docs; they cannot drift.
  • Shared code is a package, never a copy. Security, messaging, users, notifications and billing are released on Maven Central; tokens, primitives, marks and each product's identity on npm. Architecture rules fail the build on a local copy; a change lands in the package first.
  • UI debt only goes down. Every interface lints with the shared UI rules (--kz-* tokens only — no raw palette colour, no light: variant — and no locale ternary); krizaka-ratchet records each repository's remaining debt and fails CI the moment a count goes up.
  • Supported, then deprecated, then removed. Two majors are supported (N and N-1, fixes for six months); an API lives one full minor deprecated, with a codemod, before a major removes it — the support policy.
  • Tested on every commit. Unit, architecture (ArchUnit) and end-to-end suites run in CI; a release never starts on an older database schema.

Everything is Apache-2.0, built and tested on every commit, documented from the code.

Quality and security

  • main is protected on every repository: a pull request, the required CI green (administrators included), squash merge only.
  • Releases from the history. The Java blocks are versioned by release-please from Conventional Commits (checked by commitlint) and published signed on Maven Central; the npm packages by Changesets.
  • Security on by default, on every repository (one organisation configuration, new repositories included): secret scanning with push protection, Dependabot alerts and security updates, weekly grouped Dependabot version updates, CodeQL code scanning on every pull request, and private vulnerability reporting — security policy.
  • Measured in the open. OpenSSF Scorecard runs weekly on every repository (actions pinned by commit SHA, read-only tokens) and publishes its score — badges below.
Build status and OpenSSF Scorecard of the main repositories — live
Repository main Scorecard Repository main Scorecard
orochia orochia orochia Scorecard orazaka orazaka orazaka Scorecard
orochia-mobile orochia-mobile orochia-mobile Scorecard orazaka-ai-engine orazaka-ai-engine orazaka-ai-engine Scorecard
krizaka-platform-kit krizaka-platform-kit krizaka-platform-kit Scorecard krizaka-build krizaka-build krizaka-build Scorecard
krizaka-ui krizaka-ui krizaka-ui Scorecard krizaka-com krizaka-com krizaka-com Scorecard

Latest releases: krizaka-platform-kit krizaka-build orochia-mobile @krizaka/icons @krizaka/charts

Support Krizaka

Made in Montréal · Open by default · Sovereign by design

Pinned Loading

  1. krizaka-com krizaka-com Public

    Krizaka — krizaka.com: the products, the interactive architecture and the documentation generated from the code (Next.js).

    TypeScript

  2. orochia orochia Public

    Orochia — the video platform where creators keep 90%: direct-to-CDN 4K streaming, payments settled exactly once, built-in 18+ compliance.

    TypeScript

Repositories

Showing 10 of 33 repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Top languages

Loading…

Most used topics

Loading…