Brain Server — Documentation
A local-first semantic-memory and knowledge-graph server for AI agents. Runs on a 4 GB ARM device drawing under 5 W — no GPU, no cloud, no per-query cost.
This directory is the public, informational documentation for Brain Server. For the technical contract and engineering records, see the linked files in the repo root.
Documentation map
| Document | What it is |
|---|---|
| Overview | What Brain Server is, who it is for, and the five differentiators |
| Quickstart | Build, run, and make your first recall in minutes |
| Architecture | How recall, ingest, the knowledge graph, and governance fit together |
| Human in the loop | Meaningful human control: what reaches a human, and how to evaluate it |
| Deployment | Service install, configuration, backup/restore, operational health |
| Docker | Container image, compose, offline model bake, container ops |
| Proxy SSO | Reverse-proxy SSO (OAuth2-Proxy / Caddy / Authentik) in front of the server |
| Security | Threat model, authentication modes, and the controls that protect data |
| MemGhost mitigation | How brain-server neutralizes the memory-poisoning attack (arXiv 2607.05189) |
| AI literacy (Art 4) | Operator playbook for the EU AI Act Art 4 literacy obligation |
| RFP response kit | Map brain-server features to common enterprise RFP sections |
| Compliance | ISO 42001 / NIST AI RMF / SOC 2 posture, DSAR, retention, jurisdiction |
| Product site | Buyer-facing landing, install, quickstart, editions |
| Research | One scientific explainer per retrieval mechanism (reference → implementation → ceiling) |
| Blog | One technical-buyer post per hard-won mechanism, each tied to its research/trust source |
| Media kit | Positioning, one-liners, and a Brain-vs-Mem0/LangGraph/RAG sizing table with honest ceilings |
| Trust / proof map | Every security/compliance claim → shipped release → live curl/brain proof |
| API | Endpoint reference and links to the full contract |
| Roadmap | The shipped release history and the path forward |
Linked engineering documents (repo root)
These are the source-of-truth technical records referenced throughout this guide:
- README — quick start, feature overview, endpoint table, CLI, configuration.
- API_CONTRACT.md — the versioned HTTP contract, query semantics, error codes.
- openapi.yaml — the machine-readable OpenAPI 3.0 contract (
GET /openapi.yamlat runtime). - SPECS.md — the technical specification.
- SECURITY.md / THREAT_MODEL.md — security posture and threat analysis.
- COMPLIANCE.md — compliance mapping and governance controls.
- BENCHMARKS.md — measured latency / recall / RSS figures.
- ROADMAP.md — the full release chain and plan.
- CHANGELOG.md — per-version release notes.