Skip to main content

GRAFOMEM — the governed memory runtime for agents

Memory your agents can move, merge, and prove they erased.

GRAFOMEM is an open, self-hostable runtime for agentic memory — a two-tier system with governance built into the substrate. Give your agents a fast in-model working state and a durable, auditable fact store, with signed receipts and cryptographic erasure certificates as first-class primitives.

The fastest way to feel it: add governed checkpoints to a LangGraph agent in three lines → LangGraph quickstart.

Two tiers, one system​

TierWhat it isGovernance primitive
Working memory (CSO)a fast, fixed-size in-model state M, read y = Mq — bounded, portable, mergeablesigned transition receipts
Durable facts (GMP)a lossless, queryable, model-agnostic fact store (predicate/subject/object, validity, supersede)cryptographic erasure certificates

The tiers are complementary — the working tier is fast and lossy (RAM / hippocampus), the durable tier is lossless and auditable (disk / neocortex) — bridged by recall (facts → working state) and consolidation (the interaction stream feeds both). Memory is the implementation; governance is the product.

Start here​

pip install grafomem langgraph-checkpoint-grafomem
from langgraph.checkpoint.memory import MemorySaver
from grafomem_checkpoint import GrafomemSerializer, GrafomemCheckpointSaver

saver = GrafomemCheckpointSaver(
    MemorySaver(serde=GrafomemSerializer(private_key, key_id, trust, consent))
)
graph = builder.compile(checkpointer=saver)

saver.delete_thread("user-123")
receipt = saver.last_receipt("user-123")
assert receipt.verify(public_key)      # signed proof the erasure transition occurred

Every checkpoint is signed and tamper-evident; delete_thread yields a signed state-transition receipt. Be precise about what it proves: the erasure operation occurred (state overwritten, bound to a key and time) — not information-theoretic unrecoverability or media sanitization. That precision is the point.

Package note: pip install grafomem installs the runtime; import as grafomem. (The legacy aml import is a deprecated alias and will be removed.)

Who is this for?​

  • Agent developers — drop governed, portable, erasable memory into LangGraph (and, soon, other frameworks) without changing how you build.
  • Enterprise & compliance teams — signed, independently-verifiable evidence of deletion and tenant isolation; the basis for GDPR/CCPA/EU-AI-Act reporting in GRAFOMEM Cloud.
  • Memory-system builders — implement the durable-tier protocol (GMP), run the conformance suite, and publish a signed capability report.

Verified, not asserted (how the durable tier earns trust)​

A declared capability is not an observed one. GRAFOMEM ships an executable conformance suite: "supports capability X" is defined operationally as passes the two-sided, bootstrap-CI test for X. Conformance doesn't prove correctness — it measures it. This is how the durable tier earns trust and the basis for the signed capability reports in the Cloud tier.

Licensing​

  • Runtime core (grafomem.runtime / grafomem.cso): Fair Source (FSL-1.1-Apache-2.0) — self-host, use, and modify freely; only a competing managed service is restricted; converts to Apache-2.0 in 2 years. (Fair Source, not "open source.")
  • Spec (GMP), .gfm format, conformance suite: open (Apache-2.0 / MIT) — freely implementable, so the standard can have independent implementations.
  • GRAFOMEM Cloud: commercial.

Next​