100 % Open Source (Apache 2.0) β€’ Data-Sovereign AI on Your Own Hardware

Your sovereign
local AI harness

Say goodbye to US cloud datacenters for confidential documents, code, and company secrets. Run open-source LLMs deterministically, resource-efficiently, and auditably on your own infrastructure β€” with full workflow graphs, isolated namespaces, and Human-in-the-Loop.

⚑
Hardware Efficiency: Optimized for lean local models (e.g. gemma4:e2b via Ollama starting at 6 GB VRAM) – no GPU clusters needed.
Libre Workspace AI Dashboard with Klaus Martin and model selector

End Context Bloat & Prompt Roulette

Why traditional agent frameworks struggle on local hardware and how Libre Workspace AI delivers deterministic precision.

Legacy Agents (e.g. Hermes)

Too context-heavy & erratic

Traditional frameworks cram the entire chat history, endless system prompts, and dozens of tool definitions into a single massive prompt context.

  • βœ•
    Context Degradation: Local models lose track and hallucinate when prompts contain thousands of irrelevant tokens.
  • βœ•
    VRAM Spikes: High compute waste and sluggish response times on standard desktop and server hardware.
  • βœ•
    Infinite Loops: Uncontrolled agent loops without strict barriers or deterministic step validation.
Libre Workspace AI Harness

Deterministic, lean & focused

Execution flow, state transfers, and guardrails run in deterministic Python code. The LLM is called strictly for language comprehension and synthesis.

  • βœ“
    Dynamic Skill Runner: Injects only the exact tool needed for the current step at runtime into the prompt.
  • βœ“
    Strict Loop Guards: Automatic safety guard stops execution after 20 iterations per run to prevent runaway processes.
  • βœ“
    Transparent File System: SOUL.md, memory/, and learnings/ stored in open, versionable Markdown files.
πŸ’»

For Linux Desktop

Installs unprivileged with a single command in user space (~/.local/share/libre-workspace-ai). Includes a systemd user service and native desktop app launcher – ready immediately without complex server setups.

🏒

For Server Operators & Enterprises (OIDC)

Enterprise multi-tenancy with OpenID Connect (OIDC) Single Sign-On (e.g. Keycloak, Authentik). Automatic synchronization of security groups into USER.md and role-isolated agent sandboxes.

Three Pillars of True Sovereignty

From interactive multi-modal chat and relentless business automation graphs to modular tool extensions.

Pillar 01

Flexible AI Chat & Dynamic Skill Runner

Use a familiar, responsive chat interface for spontaneous inquiries, brainstorming, and ad-hoc tasks. Under the hood, the intelligent Dynamic Skill Runner ensures maximum efficiency.

  • βœ“
    Context Protection: Feeds the LLM only the tools needed for the immediate step, preserving token budget.
  • βœ“
    No Overload: Lean models (from 6 GB VRAM) stay focused with significantly fewer hallucinations.
  • βœ“
    Multi-Modal: Built-in offline voice recognition (Vosk), document processing, and vision analysis.
Chat Console • Vision & Dynamic Tools
Multi-Modal Chat and vision inspection in Libre Workspace AI
Workflow Canvas • Graph Builder
Workflow Canvas with StartNode, AccessLearningsNode, DynamicRunnerNode
Pillar 02

Deterministic Workflows (n8n-Style)

Fixed, directed execution graphs for mission-critical business processes. Define workflows in Python or using the visual Canvas Builder for 100% reproducibility.

  • βœ“
    Directed Graphs: Explicit chaining of BaseNode, PythonDecisionNode, and LLM nodes.
  • βœ“
    Automated Pipelines: Daily email digests, system health checks, automated document generation (PDF/ODT).
  • βœ“
    Auditable & Reliable: No prompt gambling β€” every single transition and output is tracked and reproducible.
Pillar 03

Modular Skills & MCP Integration

Extend capabilities seamlessly across three standardized skill interfaces tailored for your infrastructure.

  • βœ“
    Pure Python Domain Skills: Direct access to IMAP/SMTP, Nextcloud WebDAV, Matrix, Bash, System Ops, and ODT/PDF creation.
  • βœ“
    Markdown Prompt Skills: Define specialized agent behaviors with simple SKILL.md files.
  • βœ“
    Model Context Protocol (MCP): Native support for community MCP servers and external tool ecosystems.
🐍

Python Skills

Native Python execution for IMAP, WebDAV, Bash, System & ODT/PDF

πŸ“

Prompt Skills

SKILL.md templates, roles & reusable agent heuristics

πŸ”Œ

MCP Protocol

Standardized Model Context Protocol for 3rd-party tools & MCP servers

Sovereignty Over Autonomy

Fully autonomous agents carry serious real-world risks. Libre Workspace AI enforces human approval gates and strict task sandboxing.

βœ‹

Human-in-the-Loop

HumanApprovalNode • Approval Gate
Autonomous agents should never dispatch sensitive emails, alter server configurations, or modify customer records without explicit consent.

Any critical node execution pauses the pipeline and issues an interactive approval card in the WebGUI and CLI. Inspect outputs, edit parameters inline (✏️), and authorize via /approve β€” or reject safely.
βœ‹ Approval Gate: Execute System Upgrade PENDING
Command: apt update && apt upgrade -y
Risk Level: Medium (Root privileges)
/approve [id] ✏️ Edit Command
πŸ‘₯

Agent Namespaces

Multi-Agent • Attention Isolation
A single monolithic agent forced to handle every domain inevitably suffers from attention degradation and prompt interference.

Libre Workspace AI separates operational domains (Sysadmin, Support, Copywriter, Analyst) into isolated namespaces with dedicated long-term memory, personality profiles (SOUL.md), and self-reflection logs.
users/<user>/namespaces/
β”œβ”€β”€ klaus_martin/ (Department Lead & Router)
β”‚   β”œβ”€β”€ SOUL.md • memory/ • learnings/
β”œβ”€β”€ operator/ (Automation & Operations)
β”œβ”€β”€ copy_pr/ (Ghostwriter & Communications)
└── librarian/ (Knowledge Curator & Synthesis)

Installation

Choose the best option for your desktop, self-hosted server, existing Libre Workspace setup, or managed GDPR cloud.

Self-Hosted Server
🐳

Standalone Docker Deployment

For dedicated servers, homelabs & SMBs (OIDC-ready for Keycloak, Authentik)

Containerized deployment with Docker Compose. Includes enterprise multi-tenancy, OIDC single sign-on, and configurable AI inference backends.

git clone https://gitlab.jf-vogelbacher.de/jean/libre-workspace-ai.git && cd libre-workspace-ai && cp .env.example .env && docker compose up -d
Docs & Setup Guide β†—
Ecosystem Native
πŸ“¦

Libre Workspace Add-on

Run natively inside your existing Libre Workspace environment

Simply search for lw-ai in the Addon Center. Installs and links the AI components automatically into your desktop workspace.

Managed / Turnkey
☁️

Managed Libre Workspace Cloud

Turnkey solution without hardware maintenance overhead

Hosted in ISO-27001 certified data centers (Germany & Finland), 100% GDPR-compliant, pre-connected to Nextcloud, Email, and Matrix.