sovereign version control

graf

Version control that makes sense.
Content-addressed, cryptographically signed, agent-native – and actually fun to use.

One protocol. One identity. One manifest.
Ship code, distribute packages (yes, even to GitHub if you want), prove integrity – without ever touching GitHub again.

~34K Lines of Code

70+ Tests + Smoke

30+ Commands

α Public Alpha

Install View Source →

Why Graf

First Principles. Zero Baggage.

What happens when you build a VCS from the physics up, without 30 years of accidental complexity.

Content-Addressed

BLAKE3 CIDs. The hash is the name. Every object is immutable, every reference is a proof. Physics, not policy.

Format: graf1 + hex(BLAKE3(type_byte ++ content)). 69 characters. Deterministic.

Three-Clock Causality

Wall clock + Lamport counter + local sequence. Every event has a total causal order. CRDT-safe. Merge without coordination.

Distributed-first timestamps. No clock skew ambiguity.

Cryptographic Identity

Ed25519 keypairs. Your public key is your identity. No usernames, no passwords, no OAuth, no KYC. SoulKeyID – 20 characters, zero PII, permanent.

Format: grf: + hex(BLAKE3(pubkey)[0:8]). Challenge-response auth.

Radically Simple

~34,000 lines of Janus + Zig. Full VCS + package manager + native transport. 30+ commands. Git needs 400K lines for less.

Fewer lines means fewer bugs, faster audits, easier contribution.

Git Interop

graf git push redistributes your repository to any legacy git remote – GitHub, GitLab, Gitea, bare SSH. Sovereign at the core, compatible at the edge.

Move at your own pace. Keep your mirrors. Leave when you're ready – or don't.

"Git tags are faith. Graf releases are receipts."

Ed25519-signed release certificates with embedded test proof. The version, the checkpoint, the tree, the signature – all in one CAS object, verified by BLAKE3.