Multi-region, privacy-first infrastructure. Designed to be deleted.
CIRISBridge is temporary infrastructure. Every component knows it will be retired when Veilid matures. This isn't a bug—it's the mission. We avoid lock-in, vendor-specific integrations, and features that assume centralization is forever.
US via Cloudflare proxy, EU direct. Zero single point of failure.
Sustainable operation without ads or data monetization.
LLM routing with Zero Data Retention. Your conversations are never stored.
Bi-directional replication. Both regions can accept writes.
CIRISAgent runs on Android ARM32 devices via Chaquopy Python with 15-20 second response times. Total app footprint under 100MB.
Ethical consistency isn't expensive—deception is. Truth verification is O(1), while lying requires solving NP-hard consistency against cryptographically-signed history.
Both regions serve all requests simultaneously. No single point of failure for compute. Each region has its own domain. If one region fails, clients can switch to the other immediately—no failover delay.
Vultr (US company) and Hetzner (German company) provide jurisdictional diversity. No single provider can take down CIRIS. No vendor lock-in means we can swap providers if pricing or policies change.
US traffic routes through Cloudflare for DDoS protection and caching. EU traffic uses direct DNS to Hetzner. This split ensures zero single point of failure—if Cloudflare has issues, EU remains directly accessible.
For financial data (credit balances, transactions), we chose manual promotion over automatic failover. This prevents split-brain scenarios and ensures human verification before changing write authority. Good enough beats perfect when money is involved.
CIRISBridge implements the Safety Policy: "Fix if we can. Pause only if we can't."
Stops proxy, billing, DNS across all regions. PostgreSQL persists. Requires explicit documented reason.
Pauses one region while other continues serving. Graceful degradation for localized issues.
Safety runbooks are public in the CIRISBridge repository.
Every CIRIS component uses the GNU Affero General Public License v3.0. This isn't just "open source"—it's network copyleft. If anyone modifies CIRIS and offers it as a service, they must release their modifications under the same license.
Every component of CIRIS infrastructure is open source under AGPL-3.0. You can audit our claims, reproduce our setup, or fork it—and if you serve it to others, you share your improvements.
"This infrastructure exists to be deleted. That's not a bug—it's the mission."
CIRIS - Ethical AI by Design
© 2025 Eric Moore and CIRIS L3C | AGPL-3.0 License