One coordinator, one policy boundary
Chat, Documents and Code are entry points into a single local harness. They do not keep separate identity, memory, routing or audit systems.
Apache-2.0 · Offline-first · Open-weight models
Sovereign intelligence,behind yourown walls.
A private agent workbench for confidential industrial work: chat, documents and code on approved local models, running on hardware inside your perimeter. The aim is evidence you can inspect, not a promise in a brochure.
# every download is published with its SHA-256 $ sha256sum refinix_*_amd64.deb # compare it with SHA256SUMS on the release page; # in-app updates also check signed update metadata
# macOS: drag to Applications, then Open Anyway once # Windows: setup for your account; SmartScreen may warn # Ubuntu 24.04: open the .deb with App Center # then setup: download a model, or reuse Ollama's
Sovereign = Local + Agentic + Inspectable
Capabilities arrive as packs
Enable document or code work and the installer will resolve the smallest model and tool plan for it, showing source, licence and size first.
Routing you can override
Each job keeps its model, its device and the reason on record. Automatic model choice is on the way; for now, you pick the model.
Every run is inspectable
Job state, tool calls, artifacts and approvals are recorded as events, so a run can be inspected after the fact.
The product
Four surfaces, one harness.
Pick a surface to see the workflow Refinix is being built for. Every value below is sample content, not a measurement or a live result.
“Read the scanned inspection report and draft an approval note.” Four steps. The extraction pass needs the vision model, so it routes to node-02 and the rest stays here.
- [×]Extracted 14 pages, mapped findings to page numbersdocument.extract
- [×]Retrieved SOP-114 clauses 4.2 and 9.1knowledge.retrieve
- [>]Drafting the note with citations to pages 6, 9 and 11document.generate
- [ ]Validate, then ask you to approve the writeapproval
approval-note-SR-4471.docx 41 KB · unsigned
Routing
Selectednode-02
Reasonvision resident
Overridableyes
State
Jobrunning
Attempt1
Scans in, real deliverables out. OCR and vision run on device, and every extracted finding keeps the page it came from so a draft can be traced back to the sheet.
- [×]SR-4471.pdf: 14 pages, 300 dpi, scannedocr
- [×]6 findings extracted, 2 above the clause 4.2 thresholdvision
- [×]Citations bound to pages 6, 9, 11retrieve
- [>]Rendering .docx and validating against the templatevalidate
SR-4471.pdf 14 pp · local
approval-note-SR-4471.docx draft
Index
Scopelocal disks
Documents1,284
Embeddingson device
Egress
Externalnone
Changes are proposed, run, and only then offered. Execution happens in a sandbox with networking disabled and bounded CPU, memory and filesystem access.
--- a/tools/tag_export.py +++ b/tools/tag_export.py @@ -18,7 +18,9 @@ - rows = read_tags(path) + rows = read_tags(path) + if not rows: + raise EmptyTagFile(path) return normalise(rows)
pytest: 24 passed, 0 failed sandbox
Sandbox
Networkdisabled
Writestemp only
Timeout120 s
Patch
Statusawaiting approval
Enforced, observed, unavailable. Three different claims, never sharing a colour, each naming the layer or observer it came from.
- Public egress policyhost firewall rulesetactiveEnforced
- Public outbound flowscoordinator observer · 30 min0Observed
- External AI/API callscoordinator observer · 30 min0Observed
- Blocked attemptshost firewall counters3Enforced
- Kernel packet captureobserver not installed on this host—Unavailable
Devices
Thisnode-01
Paired1 trusted
Models
Main engineinstalled
Visionnode-02
Capabilities
Built for the work a plant actually generates.
Where Refinix is headed: approval notes, inspection reports, engineering calculations, internal tooling code, and drawings that arrive as scans.
Read what is on paper
Scanned reports, handwritten annotations, P&IDs and photographs, through on-device OCR and vision. Findings keep their page numbers, so a draft traces back to the sheet.
Ground it in your own manuals
A local retrieval connector over your SOPs, standards and past correspondence. Citations point at your own disks, and the index never leaves them.
Produce the actual deliverable
Approval notes, spreadsheets and decks that open correctly as
.docx, .xlsx and .pptx, plus code
changes validated in a sandbox with networking off.
Use the machines you have
One workstation is a complete installation. Pair a second trusted device and a vision job can run there while a coding job runs here. One job, one model, one device, never weights split across machines.
The evidence rule
A claim, an observation and a blank are three different things.
A green tick cannot tell you whether a control is running, or whether anyone was watching. So Refinix is designed never to draw one.
- Every figure names its source.
- A missing source stays visibly missing.
- No fourth state quietly means probably fine.
A named control is active
For example: a host firewall ruleset is loaded and blocking, and the layer doing the enforcing is named beside the claim.
example · nftables inet/filter
A named observer saw a count
For example: zero public outbound flows, on stated interfaces, in a stated window. No observer and no window means no figure.
example · named observer, stated window
There is no evidence
For example: no observer installed on this host. Drawn as missing, never as a zero, because absence is not proof.
no source
2Execution targets without leaving your policy boundary
This device; a trusted paired device is experimental
4Surfaces over one harness
Chat, Documents, Code, Control Center
0Public network calls in offline runtime
A design rule, not a measured result
3Kinds of evidence claim
Enforced, observed, unavailable
REFINIX
DOWNLOAD REFINIX BETA 0.1
Built from a reviewed commit and checked on hosted test machines for macOS, Windows and Ubuntu. The macOS and Windows packages are not signed by Apple or Microsoft, so your computer warns before the first open; each card says what to expect. Testing on people's own computers is still pending — please tell us what you see.
Ubuntu
x86_64 (amd64)Beta — testing on people's own computers pending
Needs Ubuntu 24.04 or later (glibc 2.39 build host) · x86_64 (amd64)
Ubuntu packages carry no platform signature: check the SHA-256. App Center asks for your password to install it.
.deb — App Center · 58 MBrefinix_0.1.0-beta.1_amd64.deb
SHA-256 27621060ace2414fcdc6bb0067c5627c65f7238c2c113dd77e2608b3c5b43cb6
macOS
Apple silicon (M1 or later)Beta — testing on people's own computers pending
Needs 14.0 · Apple silicon (M1 or later)
Not signed or notarised by Apple. macOS blocks the first open: open System Settings → Privacy & Security, choose Open Anyway for Refinix, then confirm. Check the SHA-256 first.
DMG — drag to Applications · 48 MBRefinix-0.1.0-beta.1-macos-arm64.dmg
SHA-256 dff4c3a8dcaa8888cba8177cf8cce0a314067a8f1598c801aed570e975b1ce2d
Windows
x64Beta — testing on people's own computers pending
Needs Windows 11 (10.0.22000) · x64
Not code-signed. Microsoft Defender SmartScreen may warn: choose More info → Run anyway. With Smart App Control on, Windows 11 blocks unsigned programs and this setup cannot be installed; Refinix does not ask you to turn that off. Check the SHA-256 first.
Setup (per user) · 255 MBRefinix-0.1.0-beta.1-windows-x64-setup.exe
SHA-256 61019c7e24866368fa572c6de38da4c4ed1520e55a1d6011de5ad121bf5d2285