Genaryx. The console over the open stack, deployed on your infrastructure. The frames on this page come from the demo build, which runs simulated data; the live run is in what is proven.
genaryx · the control room over the stack
Genaryx. One control room over the whole agent stack.
The open services each govern one plane of an agent fleet. Genaryx is the console built on top of them for companies that run real fleets. It runs on your own infrastructure and you open it in a browser.
signingpasskey ES256 per action · honest software fallback
remoteWireGuard, plane off the internet
copilotFelyx · local-first
hostingself-hosted · any cloud or on-prem
cryptopost-quantum ready · ML-DSA in the Qryx evidence it carries
licenceApache-2.0
first, the honest part
The open stack stays open.
Genaryx is Apache-2.0, like everything under it. It is the room built on top of the open services, and you can read every line of it before you run it.
why a room over a stack
What the console adds that the stack alone does not.
Genaryx exists for the moment the fleet stops being a side project: when the person on call is not the person who built it, when an auditor asks for proof, when 2am happens.
One Rust core. Fifteen frames you can open yourself.
Every frame below is the demo above, which is the console itself on simulated data. What this console did on a real box against a live plane, where it killed a runaway on live traffic, is written up in what is proven.
Overview$35,818 of AI spend in the rolling window.IncidentsOne stream for every plane, filtered by source, by severity or by text.MoneyEvery run against its cap, with Replay, Cap and Kill on the row.Agent 360One agent in one drawer.Statistics42 agents attributed, out as CSV or JSON.PolicySix approvals waiting on a human.Identity45 identities off the idryx snapshot, 14 of them privileged.GraphThe runaway sitting red in the middle of its own delegation chain.Bus Explorer12 lines the envelope refused, named at their file and offset.Web EgressTen fetches: eight through, two refused.QualitySix eval runs read from verdryx.CopilotFelyx names the runaway and proposes a cap that a person still has to approve.MemoryA procedural store this version says plainly it does not implement.PostureZonds over the whole stack, each with the fix written under it.RemoteIt reaches a stack you already run over your own WireGuard tunnel.
click any still to open it full screen
felyx · the copilot
An AI that reads everything and can touch nothing.
Felyx is the fleet's analyst. It is also an AI we can honestly ask you to trust, because the trust is structural, not a system prompt.
The console reaches a client-hosted Cloud from inside your own WireGuard tunnel, so the control plane never faces the internet. And Felyx sits beside it with no signing key at all.
the technology
One shell. One Rust brain. Hardware where it counts.
One core, one shell
The browser console is the product, and it is deliberately thin: every screen is a call into one shared Rust command layer.
Hardware signatures, shipped
Kills, budget changes and approval grants are confirmed per action with a passkey on your own device: Touch ID, Windows Hello or a security key.
WireGuard, but yours
Your box runs the WireGuard side and issues each device its own peer config as a QR: scan, connect, done.
An audit trail that proves itself
Every governance event the stack emits carries the SHA-256 of the event before it. Tampering does not hide, it breaks the chain exactly where it happened.
where this stands
Built, and proven on a live fleet.
reported, not yet in the record
A laptop on the public internet opened the console over a tunnel this box issued itself, with no other route in.
A device-signed kill went through a real fleet, against a plane closed to the internet.
Felyx, on a live local model, named the caught runaway and filed a capped proposal only a human could approve, on 42 agents.
Is Genaryx free, or is there a paid tier above it?
It is Apache-2.0, the same licence as every service under it, and an Apache grant on a version already released cannot be taken back afterwards. There is no tier above it, no seat count, no licence key and no account to create.
Is it open source, or open core with the useful parts held back?
Open source, and nothing is held back. The console is one repository, TAIPANBOX/genaryx, and every tab in the screenshots above is built from it. There is no edition kept beside it, held back or otherwise.
Is Genaryx a desktop application?
No. The core is a Rust binary running on infrastructure you own, and you open the console in a browser. Nothing is installed on a laptop, which is the point at 2am when the person on call is using whatever machine is nearest. Reaching a private plane is the console's own WireGuard tunnel rather than a VPN somebody has to maintain.
What does the console add that the services do not already do?
One window over every plane, and three things no single service has a place to put: a destructive action confirmed by the passkey in your hand and journaled with the reason you typed, an incident feed sorted worst-first across every plane, and one signed evidence pack carrying EU AI Act, SR 11-7 and SOC 2 mappings.
You can run the open stack by hand in one command, and plenty of teams should. The console is for the point where the person on call is not the person who built it.
