One signed Docker image. Every feature compiled in. Free to run. docker pull crowkis/crowkis:latest

Changelog

What's shipped

The short version of what's inside the image you pull today — and the discipline behind how it got there.

The full engine, shipped

CrowkisDB LSM store with WAL durability, HNSW vector index, and all seven intelligence systems — semantic + structural matching, anti-poisoning, adaptive thresholds, reasoning reuse, smart eviction, confidence scoring, freshness control — live in every edition.

Four protocol surfaces

RESP3 for drop-in Redis clients, gRPC h2c for protobuf shops, the REST management API, and the MCP server for Claude Code and agent frameworks. One cache behind all four.

Hardened Docker distribution

Single binary-only image on Docker Hub and GHCR, amd64 + arm64, non-root, read-only filesystem, dropped capabilities, built-in health checks. Upgrades are a pull and a restart.

The control plane

Dashboard with live verdict feed, per-tenant budgets, canary and migration workflows, PII and compliance reporting, RBAC and API keys — auditable through the same REST API it runs on.

Release discipline

Every release passes the same gate: the 347-test Rust suite, Docker build, boot, health, auth boundary, and a restart-durability drill. A release that lowers any bar doesn't ship.

Enterprise unlocks

Virtual API keys with budgets and rate limits, Crowkis Replay, prompt management, agent and tool-call caches, Provider Arbitrage Router, cross-provider cache bridge, compliance modes, SSO, and audit export — all license-gated in the same image.