We build what others take years to get right — AI that never leaves your walls, a video platform that pays every cent exactly once, a dating app where you talk first. Compliance and security aren't add-ons: they're compiled in.
|
The AI that never leaves home. A multimodal AI orchestration engine — chat, RAG, agents, image, audio, video — where every request crosses a
deterministic interceptor pipeline to the best local model. Your documents, your models, your network: nothing
leaves it. Law 25 and GDPR by design. One command, Workspace · Docs · How it works · Demos |
Creators get paid. Every cent, exactly once. The creator video platform: direct-to-CDN 4K streaming, an Explorer that is never empty, complete stories (sound, likes, tips, private replies), audiences the creator chooses, auctions and challenges paid in credits held in escrow until delivery. Creators keep 90 %, settled once on a double-entry ledger. Built-in 18+ compliance — on the web and on iOS and Android (orochia-mobile). Try it · Repository · Docs · Video tour |
|
The dating app where you talk first. No swipe, no catalogue, no score. An AI agent gets to know you, then opens a small batch of people who match you in both directions — with reasons, never a score — and the next batch learns from your debrief. iOS and Android, built on the Krizaka blocks, with Orazaka as its AI engine. |
A listening space with a face and a voice. Powered by Orazaka's wellbeing pack: an AI presence that listens, reflects back and stops — a set length, a set number of moments, and what it keeps is a three-line summary, not a transcript. We are building it in the open and studying its framework — legal, ethical, clinical — before anything is offered. Nothing is online, and there is no date. |
![]() |
![]() |
| Orazaka — Eric answers a customer from his own documents, then generates the product photo. Everything ran on one Mac. More demos | Orochia — Alex, a fan, supports Elena, a creator; she sees it arrive and keeps 90 %. Recorded on the real app. Elena's and Alex's day |
| You want to… | Go to |
|---|---|
| See the products | krizaka.com/products · Orochia running: dev.orochia.com · Orazaka: demos · Yazakia: coming soon |
| Read the docs | One place, krizaka.com/docs: Orazaka · Orochia · UI components · Java building blocks |
| Run Orochia locally | krizaka/orochia — npm run setup && npm run dev (Node ≥ 20, Docker) |
| Run Orazaka locally | krizaka/orazaka — clones every component; the orazaka CLI does install → start → dev, and orazaka demo seed loads the demo |
| Understand the architecture | Orazaka, interactive · Orochia docs |
| See where we are going | Roadmap — milestones and dates · live board: Krizaka Roadmap |
| Contribute | Contributing · good first issues in each repository · Code of conduct |
| Report a vulnerability | Privately — Security policy |
| Talk to the team | krizaka.com/contact · GitHub Discussions in each product repository |
| Support the work | Star, contribute, sponsor |
What the repositories actually run — each badge is a dependency you can find in a pom.xml, a package.json, a
requirements.txt or a workflow.
| Layer | Stack |
|---|---|
| Backend | |
| Data & messaging | |
| AI, on your machines | |
| Web | |
| Mobile | |
| Delivery | |
| Quality |
Claims are cheap; each line below links to the file that proves it.
| We say | Where to check |
|---|---|
| Hexagonal architecture, enforced at build time. Layer boundaries are ArchUnit rules: a core class that reaches for the web layer, the router or a Spring Boot starter fails the build. | CodeRules.java · LayerBoundaryTest.java |
| Messages are never lost. A transactional outbox writes the event with the data; consumers retry, then park the message in a dead-letter queue. | outbox/ · ConsumerRetryProperties.java |
| One error format. Every API answers errors as RFC 9457 Problem Details, with a correlation id. | ProblemDetailsAdvice.java |
| Money moves exactly once. Payments are confirmed by the gateway's signed webhook (constant-time check), settled under a row lock on a double-entry ledger — never by the client. | webhook route · signature.ts · intents.ts |
Real time without a broker to pay for. Server-Sent Events fed by PostgreSQL LISTEN/NOTIFY across every app instance. |
realtime.ts · listen.ts |
| Sovereign AI. Chat, RAG, agents, images and audio on local models, behind a deterministic interceptor pipeline — nothing leaves your network. | Interactive architecture · orazaka-ai-engine |
| Documentation generated from the code. API contracts, database references, architecture maps and component pages cannot drift. | generate-docs.mjs · gen-ui-docs.mjs · krizaka.com/docs |
| Debt only goes down, in two languages. UI debt counters sit at zero and CI fails if one rises; every string exists in English and French, checked in CI; every feature has end-to-end scenarios over the real API. | lint-ratchet.json · krizaka-ratchet · @krizaka/i18n · e2e/scenarios.mjs |
Every product is built on Krizaka building blocks — open-source components any application can take on its own, published on Maven Central and npm. The products consume them; they do not own them.
| Layer | Repositories |
|---|---|
Building blocks (Java, com.krizaka) |
krizaka-build — parent POM, BOM, test kit · krizaka-platform-kit — web, security, messaging, observability and their Spring Boot starters · krizaka-users — sign-up, sign-in, OAuth, profiles, API keys · krizaka-notifications — e-mail, SMS, webhooks · krizaka-billing — credits, plans, metering |
Building blocks (TypeScript, @krizaka) |
krizaka-ui — tokens, Tailwind preset, primitives, marks, icons, fonts, charts, i18n, real time, push and shared config for every Krizaka interface |
| Orazaka — foundation | orazaka-build · orazaka-contracts · orazaka-edge · orazaka-ui-kit |
| Orazaka — AI engine | orazaka-studio · orazaka-ai-engine · orazaka-conversation-service · orazaka-job-service · orazaka-knowledge-service · orazaka-automation-service · orazaka-worker-media |
| Orazaka — applications | orazaka-web-client · orazaka-web-admin · orazaka-mobile-client · orazaka-cli · orazaka-packs |
| Orochia | orochia · orochia-admin · orochia-design-system · orochia-mobile |
| Yazakia | yazakia — API, agent, matching, legal pages · yazakia-mobile — the iOS and Android app |
| Site & organisation | krizaka-com · .github — this profile, community defaults and the shared Maven pipeline |
Clone the whole Orazaka platform — building blocks included — with krizaka/orazaka.
Import the BOM once, add a starter, and every com.krizaka artifact resolves to one coherent release —
0.2.0 is out, signed (B523D2E9DE35AE17882361BE25DF268F9213EB5D, on keyserver.ubuntu.com).
| Artifact | Version | What it is |
|---|---|---|
com.krizaka:krizaka-bom |
0.2.0 | Every Krizaka artifact at one version — changes no third-party version |
com.krizaka:krizaka-spring-boot-starter-web · -security · -rabbitmq · -observability |
0.2.0 | One dependency each: the module below and its auto-configuration |
com.krizaka:krizaka-web |
0.2.0 | RFC 9457 problem details, the correlation id, pagination and JSON written once |
com.krizaka:krizaka-security |
0.2.0 | Local session-JWT verification, the baseline every filter chain starts from, SERVICE tokens |
com.krizaka:krizaka-messaging |
0.2.0 | Events with their envelope in AMQP headers, a transactional outbox, atomic deduplication, retry and dead-letter topology |
com.krizaka:krizaka-observability |
0.2.0 | Traces, metrics and structured logs on OpenTelemetry and Micrometer |
com.krizaka:krizaka-test-support |
0.2.0 | ArchUnit code rules, configuration-binding checks and Testcontainers helpers |
com.krizaka:krizaka-parent |
0.2.0 | The parent POM: Central metadata, Java 21 conventions, the signed release |
com.krizaka:krizaka-users-api · -client · -core · -persistence |
0.1.0 | User management as a contract, a typed client, or a library |
com.krizaka:krizaka-notifications-api |
0.1.0 | Request an e-mail, SMS or webhook notification |
com.krizaka:krizaka-billing-api · -client |
0.1.0 | Credits, entitlements and metering as a contract and a typed client |
Note
The 0.2.0 BOM already manages users, notifications and billing at 0.2.0, but those are published at 0.1.0 —
their 0.2.0 ships in November. Until then, declare them with <version>0.1.0</version>.
A service with the starters:
<dependencyManagement>
<dependencies>
<dependency>
<groupId>com.krizaka</groupId>
<artifactId>krizaka-bom</artifactId>
<version>0.2.0</version>
<type>pom</type>
<scope>import</scope>
</dependency>
</dependencies>
</dependencyManagement>
<dependencies>
<!-- problem details, correlation id, pagination -->
<dependency>
<groupId>com.krizaka</groupId>
<artifactId>krizaka-spring-boot-starter-web</artifactId>
</dependency>
<!-- session JWT and SERVICE tokens -->
<dependency>
<groupId>com.krizaka</groupId>
<artifactId>krizaka-spring-boot-starter-security</artifactId>
</dependency>
<!-- outbox, deduplication, retry / DLQ -->
<dependency>
<groupId>com.krizaka</groupId>
<artifactId>krizaka-spring-boot-starter-rabbitmq</artifactId>
</dependency>
<!-- published at 0.1.0 until November: pin it -->
<dependency>
<groupId>com.krizaka</groupId>
<artifactId>krizaka-users-client</artifactId>
<version>0.1.0</version>
</dependency>
</dependencies>All artifacts → · Java docs · How they fit together
Every interface is built from layers published on the public npm registry — no account or token to install. Releases
are published by the team from a reviewed main; provenance attestations come once trusted publishing is configured.
Component docs → · All packages · How they fit together
- One contract per product. Every repository carries an
AGENTS.md— the rules its code must keep (architecture, security, compliance) — that humans and AI agents follow alike. - Documentation generated from the code. API contracts, database references, architecture maps and the
component docs — live previews and prop tables read from
@krizaka/uiitself — are extracted from the sources and published on krizaka.com/docs; they cannot drift. - Shared code is a package, never a copy. Security, messaging, users, notifications and billing are released on Maven Central; tokens, primitives, marks and each product's identity on npm. Architecture rules fail the build on a local copy; a change lands in the package first.
- UI debt only goes down. Every interface lints with the shared UI rules (
--kz-*tokens only — no raw palette colour, nolight:variant — and no locale ternary);krizaka-ratchetrecords each repository's remaining debt and fails CI the moment a count goes up. - Supported, then deprecated, then removed. Two majors are supported (N and N-1, fixes for six months); an API lives one full minor deprecated, with a codemod, before a major removes it — the support policy.
- Tested on every commit. Unit, architecture (ArchUnit) and end-to-end suites run in CI; a release never starts on an older database schema.
Everything is Apache-2.0, built and tested on every commit, documented from the code.
mainis protected on every repository: a pull request, the required CI green (administrators included), squash merge only.- Releases from the history. The Java blocks are versioned by release-please from Conventional Commits (checked by commitlint) and published signed on Maven Central; the npm packages by Changesets.
- Security on by default, on every repository (one organisation configuration, new repositories included): secret scanning with push protection, Dependabot alerts and security updates, weekly grouped Dependabot version updates, CodeQL code scanning on every pull request, and private vulnerability reporting — security policy.
- Measured in the open. OpenSSF Scorecard runs weekly on every repository (actions pinned by commit SHA, read-only tokens) and publishes its score — badges below.
Build status and OpenSSF Scorecard of the main repositories — live
| Repository | main |
Scorecard | Repository | main |
Scorecard |
|---|---|---|---|---|---|
orochia |
orazaka |
||||
orochia-mobile |
orazaka-ai-engine |
||||
krizaka-platform-kit |
krizaka-build |
||||
krizaka-ui |
krizaka-com |
- Star the repositories you use — orazaka, orochia, yazakia, krizaka-ui, krizaka-platform-kit. It is how others find them.
- Contribute — how to start, the
good first issuelabel, the roadmap. - Talk about it — a post, a talk, a link from your project's README: tell us and we will share it.
- Fund the work — sponsorship and partnerships: write to us.
Made in Montréal · Open by default · Sovereign by design

