Repositórios
The stack's code is published under BSL 1.1 — source-available, auditable, with commercial rights restricted until 2036. Eleven repositories, each linked to GitHub.
1. Core of the stack
The packages that deliver the proof and the record. These are the ones that matter for a technical evaluation.
| Repository | What it contains | Distribution | State |
|---|---|---|---|
| winnex-madhava | C++20 engine with the Cauchy-Schwarz bound | PyPI 1.9.25 | solid |
| winnex-tracer | Ed25519 signature, WORM chain, 4 domains | PyPI 1.1.4 | solid |
| winnex-ai-normalize | quality gate, 13 flags, routing by proof | PyPI 1.4.6 | solid |
| madhava-sec | prompt-injection detection by bound | PyPI 3.1.0 | solid |
2. Domain applications
The front-ends and integrations that make the stack usable in each sector.
| Repository | What it contains | State |
|---|---|---|
| tracer-med-liferay | Liferay portlet, clinical record and denied-claim app | functional |
| tracer-gov-liferay | Liferay portlet, public audit | under repair |
| winnex-maestro | integration with the Winnex Maestro ERP | functional |
| winnex-madhava-maestro | RAG connector for Maestro | functional |
3. Research and tooling
Where the components that are not on the critical path of the proof live.
| Repository | What it contains | State |
|---|---|---|
| winnex-nano | inference without CUDA or PyTorch | functional, peripheral |
| winnex-xfactor | manifold projector P=XXᵀ | refuted — technique absorbed into madhava |
| winnex-audit-cpp | C++ audit engine | research |
| winnex-production-tools | Docker and enterprise deployment | product |
| audit-trail-plugins | Tracer-GOV trail plugins | product |
| winnex-axiom | formal axioms behind the bound and the audit record | research |
| winnex-enterprise-stack | the enterprise deployment layer | product |
4. Licence, and what it means
BSL 1.1 — the licence the MariaDB authors wrote, used today by Sentry, HashiCorp and Couchbase.
The distinction matters to anyone auditing: source-available means the buyer reads and verifies the implementation. Open source would also grant unrestricted commercial rights — which is exactly what BSL restricts until the change date.
- Source-available, not open source. The code is published and readable. It is not OSI-approved, and we do not use that term.
- Free for evaluation, research and prototyping. No time limit, no licence needed.
- Production requires a commercial licence. Except for the Brazilian public sector, covered by the Additional Use Grant.
- Converts to GPL v2.0 in 2036. Each version, four years after its publication.