Local-first · 3B Parameters · Zero Cloud

Intelligence that lives
on your machine.

AURIX is a compact, open-weight AI platform engineered for absolute privacy — offline inference via llama.cpp, user-controlled memory, and a modular tool engine. No data leaves your device. Ever.

~3B
Parameters
1.9 GB
Q4_K_M Memory
45+ tok/s
Apple Silicon
0 bytes
Cloud Telemetry

Built on non-negotiable foundations.

Every architectural decision in AURIX traces back to six pillars. These aren't features — they're constraints that shape everything.

🔒

Absolute Local Execution

All inference runs via llama.cpp GGUF on your machine. No API keys. No remote endpoints. No hidden network calls. Air-gap verified.

⚡

Compact by Design

~3B dense parameters with GQA and SwiGLU for maximum quality at minimum footprint. Runs on 8GB laptops. Fits in 2.5GB VRAM.

🛡️

User-Controlled Memory

Your preferences are stored in inspectable SQLite tables — never baked into model weights. Delete anything, anytime, with cryptographic certainty.

🔧

Controlled Tool Execution

Every tool call passes through a 5-stage pipeline with Pydantic schema validation and human-in-the-loop approval gates.

🧩

Modular & Extensible

Vision, speech, and document modules plug in independently. The base engine works perfectly without any of them installed.

📐

Open-Weight & Reproducible

Apache 2.0 licensed. Every benchmark is reproducible. Every quantization level is documented. Full transparency, full auditability.

A four-layer inference stack, decoupled by design.

AURIX separates concerns across four independent layers. Each can be swapped, upgraded, or removed without breaking the others. The base model uses a ~3B parameter dense transformer with Grouped-Query Attention for efficient long-context processing.

Key Architecture Decisions

RMSNorm for training stability · SwiGLU activation for quality · RoPE positional encoding for extensible context · GQA (8 KV heads / 32 query heads) for memory efficiency during generation.

Inference Runtime

Powered by llama.cpp with native GGUF format. Supports Metal (Apple Silicon), CUDA (NVIDIA), Vulkan (AMD/Intel), and pure CPU AVX-512/AVX2 paths — all from a single model binary.

① Model Adapter Interface Layer
Accepts user prompts, manages conversation context windowing, handles tokenization/detokenization, and dispatches to the correct routing path based on profile selection.
② Inference Engine llama.cpp Core
The GGUF quantized model weights (Q4_K_M default). Performs autoregressive token generation with hardware-accelerated matrix operations. Produces raw logits and logprobs.
③ Routing Layer Profile Dispatcher
Selects the optimal execution path: direct generation for simple queries, RAG pipeline for document questions, tool chain for actions, or multi-step reasoning for complex logic tasks.
④ Verification Layer Grounding & Safety
Deterministic tools override generative hallucination for math. Citation verification checks all claims against retrieved passages. Schema enforcement on all structured outputs.

Four specialized execution modes.

Each profile tunes the routing layer, verification strictness, and tool availability. Switch instantly based on your task context.

💬
Lightweight
Fast, direct neural generation. Minimal verification overhead. Ideal for casual chat, quick summaries, and creative writing.
Latency: ~45 tok/s · Tools: Disabled
💻
Coding
Full AST indexing, syntax-aware generation, sandboxed code execution, and file diff awareness. Structured output enforced.
Latency: ~38 tok/s · Tools: Full Set
🧮
Reasoning
Multi-step logic verification. Deterministic tool dispatch for math. Chain-of-thought with self-consistency checks.
Latency: ~30 tok/s · Tools: Math + Logic
📄
Document
Local vector RAG with citation grounding. Chunk-level retrieval with cosine similarity scoring and passage attribution.
Latency: ~35 tok/s · Tools: Search + OCR

Know exactly what you need before you install.

Adjust the parameters to see real-time memory, speed, and compatibility estimates for your hardware configuration.

8,192 tokens
Model Size
1.69 GB
KV-Cache
0.16 GB
Total RAM
2.00 GB
Generation Speed
48 tok/s
Compatibility
Excellent
Apple Silicon (Metal): Full GPU offloading with unified memory. Lightning-fast attention computation. Runs effortlessly on any M-series Mac with 8GB+ RAM.

OpenAI-compatible. Completely local.

AURIX exposes http://127.0.0.1:8080/v1 — connect any IDE plugin, local script, or desktop app with zero cloud API keys.

  • ✓ Chat Completions — Full /v1/chat/completions endpoint with streaming, temperature, and system prompts
  • ✓ IDE Integration — Works with Continue.dev, Aider, Codeium, and any OpenAI SDK client
  • ✓ Structured Output — JSON mode with Pydantic schema enforcement for tool responses
  • ✓ Embeddings — Local embedding endpoint for custom vector search pipelines
  • ✓ Zero Auth — No API keys required. Localhost-only binding by default for security.
Python — openai SDK
from openai import OpenAI

# Connect to your local AURIX instance
client = OpenAI(
    base_url="http://127.0.0.1:8080/v1",
    api_key="not-needed"
)

response = client.chat.completions.create(
    model="AURIX-3B-Instruct",
    messages=[
        {"role": "system", "content": "You are AURIX."},
        {"role": "user", "content": "Summarize this repo."}
    ],
    temperature=0.2,
    stream=True
)

Three-layer memory. Zero silent retraining.

Your data is yours. AURIX uses a strictly decoupled memory system where neural weights are never modified by user interactions.

Layer 1 — Ephemeral Context

Active conversation window. Lives in KV-cache during session, completely destroyed when window closes or context rotates. No persistence. No traces.

Layer 2 — User Preferences

Coding rules, tone settings, tool defaults. Stored in ~/.aurix/preferences.json. Fully inspectable, exportable, and deletable. Never touches model weights.

Layer 3 — Vector RAG

Indexed local documents stored in SQLite vector tables. Embedded via local bge-micro model. Supports cosine similarity retrieval with passage-level citations.

Incognito Mode

One toggle disables all vector indexing, preference saving, and conversation logging. The session becomes fully ephemeral — as if it never happened.

🔇
Zero Telemetry
No analytics. No pings. No phone-home.
🗑️
One-Click Purge
Delete all stored data instantly.
🔐
Least-Privilege
Sandboxed file access per workspace.
📋
Full Audit
Every action logged locally. Inspectable.

Controlled actions, not autonomous agents.

Every tool call follows a strict 5-stage pipeline. Destructive operations require explicit human approval before execution.

1
Intent Detection
Model generates structured tool call proposal with Pydantic JSON schema.
2
Schema Validation
Strict type checking. Malformed or out-of-scope calls are rejected immediately.
3
Permission Check
Verifies operation is within authorized workspace boundaries and sandbox limits.
4
Human Approval Gate
Destructive or external actions trigger interactive preview. User must explicitly authorize.
5
Execution & Grounding
Sandboxed subprocess with timeout. Results are fact-checked against output before inclusion in response.
AURIX Studio — Project Alpha
Profile
💬 Lightweight
💻 Coding
🧮 Reasoning
📄 Document
History
📝 API refactor plan
🔍 Debug memory leak
Status
● Local · 0 Cloud
U
Can you run the test suite for the auth module and show me the results?
You · 2:34 PM
A
I'll need to execute pytest tests/test_auth.py in your sandboxed workspace. This requires authorization:
🔧 Tool Call: sandbox_run
Command: pytest tests/test_auth.py -v
Timeout: 30s · Memory: 512MB
AURIX-3B · 42 tok/s · Coding Profile

Plug in capabilities, not bloat.

Each modality is an independent, downloadable module. The base 3B engine works perfectly without any of them.

👁️

Vision

SigLIP/Moondream GGUF plugin. Understand screenshots, diagrams, charts. Runs independently of text engine.

🎙️

Speech Input

Local Whisper model integration. Transcribe audio directly to text for hands-free interaction. Zero cloud STT.

🔊

Neural TTS

Piper engine for natural text-to-speech output. Multiple voice models. Fully offline, responsive.

📑

Document OCR

Surya-style layout analysis for scanned PDFs. Extract structured text from images. Integrates with RAG pipeline.

Four editions. One architecture.

Same design language, different capability tiers. All GGUF-compatible, all locally executable.

AURIX Nano
~1.1B params · 700MB RAM
  • Ultra-responsive chat
  • Runs on 4GB systems
  • Quick summaries & lookup
  • Edge/mobile deployment
AURIX Code
~3.8B params · 2.3GB RAM
  • AST-aware generation
  • Repository-level context
  • Test & refactoring tools
  • Multi-file diff support
AURIX Pro
~7.0B params · 4.2GB RAM
  • Deep reasoning tasks
  • Large-scale RAG (100K+ docs)
  • Research & analysis
  • 16GB RAM recommended

What makes AURIX different.

Reliability & Hallucination Defense

AURIX doesn't trust the model for everything. When the task is computational, a deterministic tool handles it. When the task requires citations, retrieval provides grounding.

CapabilityApproachStatus
ArithmeticTool dispatch (not generative)✓ Verified
Code outputSyntax-validated structured JSON✓ Enforced
Document claimsPassage-level citation required✓ Grounded
UncertaintyCalibrated "I don't know" responses✓ Trained

Reproducibility & Benchmarking

Every metric is tied to specific hardware, quantization, and context settings. Held-out evaluation sets prevent contamination. Full transparency on methodology.

BenchmarkQ4_K_M ScoreStatus
MMLU (5-shot)Target ≥ 58%◎ In Progress
HumanEvalTarget ≥ 52%◎ In Progress
TruthfulQATarget ≥ 62%◎ In Progress
Perplexity Delta vs FP16≤ 4%✓ Baseline

Eight phases to a finished product.

From architecture validation through community release. Each phase has concrete deliverables and acceptance criteria.

Phase 1 — Active
Foundation & Runtime
Model selection, llama.cpp configuration, offline verification suite.
  • llama.cpp compiled for all backends
  • Q4_K_M baseline validated
  • Sub-1s first token confirmed
Phase 2
Studio Desktop App
Tauri application shell, model manager, conversation history, telemetry.
  • Native macOS/Windows/Linux
  • GGUF hash verification
  • Sub-400ms cold start
Phase 3
Memory & RAG
Vector indexing, passage citations, preference storage, data controls.
  • SQLite vector tables
  • 10K docs under 50ms
  • One-click purge capability
Phase 4
Tool Engine & Sandbox
Tool call pipeline, code runner, file access, approval gates.
  • Pydantic schema validation
  • Sandboxed subprocess
  • Human-in-the-loop UX
Phase 5
Fine-Tuning & SFT
Dataset curation, supervised fine-tuning, DPO alignment, perplexity testing.
  • Deduplicated instruction data
  • Domain-specific coding splits
  • Quantization perplexity matrix
Phase 6
Security & Hardening
Prompt injection defense, privacy perimeter, resource governors.
  • Injection benchmark suite
  • Epistemic calibration tests
  • Least-privilege audit
Phase 7
Multimodal Modules
Vision, Whisper STT, neural TTS, local HTTP API daemon.
  • Independent plug-in modules
  • 100% offline audio/vision
  • OpenAI-compatible API
Phase 8
Public Release
Signed installers, benchmarks, documentation, community edition.
  • DMG/AppImage/MSI packages
  • Third-party telemetry audit
  • Full documentation site

Intelligence shouldn't require a subscription.

Download AURIX, run it offline, keep your data. It's that simple. Open-weight, reproducible, yours.