Durable authority
A checksummed, digest-chained append-only log owns the truth. Embedded indexes are rebuildable.
Autonomous Rust data engine
One binary. One data directory. KV, structured query, recovery, and proof-bearing results—offline, without an external database or AI.
Structured query works with no LLM, embeddings, cloud, or external database.
What Hyphae does
The base product is useful before a network, model, control plane, or managed service enters the architecture.
A checksummed, digest-chained append-only log owns the truth. Embedded indexes are rebuildable.
Deterministic filters, global sorting, logical cursors, and aggregations run with hard budgets.
Caller-visible UUIDs make mutation retries durably idempotent across restarts.
Snapshots, compaction generations, backups, restore, and doctor expose complete evidence.
Portable result proofs reexecute offline against a pinned anchor and snapshot witness.
Rust, HTTP, TypeScript, Python, CLI, MCP, and framework adapters consume public contracts.
Many applications inherit a database service, cache, network policy, credentials, observability stack, and failure domain before they have proven they need any of them.
Hyphae was created for the opposite starting point: keep durable authority beside the application, expose exact limits, and make results answerable to evidence.
The proof journey
Scroll through the path from an accepted mutation to a result that can be challenged outside the serving process.
A caller-visible UUID makes the write safe to retry. The checksummed, digest-chained log owns the fact—not an index or cache.
mutation_id / durableStartup scans the authoritative log, rejects corrupt tails, and rebuilds accelerators without letting them redefine truth.
log_head / recoveredFilters, global ordering, cursors, and aggregations execute under explicit budgets. A limit failure abstains instead of returning a partial success.
snapshot / generation-42The request, complete result, snapshot witness, semantics version, and caller-selected durable anchor bind into portable proof material.
result.hyproof / portableA separate verifier reexecutes the result against the supplied witness and pinned anchor—without the original process, network, database, or model.
reexecution / exactA concrete example
This is the difference between a response that merely looks plausible and a result tied to an exact query, snapshot, and anchor.
hyphae query \
--field group --equals '"edge"' \
--sort score --proof-out result.hyproofNo SQL service. No embedding call. No network required.hyphae verify \
--proof result.hyproof \
--snapshot witness.snapshot \
--anchor sha256:<expected-anchor>Open the proof labVerifiable by result
A successful read can name the snapshot and anchor needed to verify the result somewhere else, later, without trusting the serving process.
Execute against one logical snapshot.
Bind the complete snapshot evidence.
Pin the caller-selected durable head.
Verify the proof offline.
Architecture
The log is authority. Indexes are accelerators. Clients and integrations stay outside the core and speak versioned contracts.
Where it fits
Hyphae is most valuable when local custody, bounded behavior, and recovery evidence matter more than a managed service dashboard.
Ship durable structured data with a desktop app, developer tool, or offline utility.
Map the architecture →Operate without assuming a reachable database or control plane.
Map the architecture →Keep proof-bearing reads and portable recovery evidence near the application.
Map the architecture →Add Hyphae through public contracts while the host remains fully functional without it.
Map the architecture →No AI required
KV, filters, sorting, cursors, aggregations, recovery, and proofs do not depend on an LLM or embedding model.
KV · query · aggregation · recovery · proof
Provider-neutral vectors · explicit abstention
Questions
Hyphae is deliberately smaller than a data platform and more accountable than a black box.
No. The base deployment is one Hyphae binary and one data directory. KV, structured query, recovery, and verification work without Postgres, Redis, a cache, or a cloud service.
No. Structured operations work without AI. Semantic retrieval is optional, exact, and provider-neutral when a Rust host supplies vectors.
Proof-bearing reads can be reexecuted offline against a caller-pinned anchor and complete snapshot witness.
No. Hosted multitenancy, billing, a control plane, and cloud operations are deliberately outside the autonomous engine.