Core runtime
Envoy provides the data plane, SQLite provides portable persistence, Go provides the control plane, and go-webauthn validates passkey ceremonies.
- Envoy — Apache-2.0
- modernc.org/sqlite — BSD-3-Clause
- go-webauthn — BSD-3-Clause
- Next.js and React — MIT
- ClamAV — GPL-2.0
Supply-chain evidence
Exact application versions are locked and recorded in THIRD_PARTY_NOTICES.md. Production images receive SBOM/provenance attestations, vulnerability gates, and keyless signatures.
No licensing shortcut
Using open-source dependencies does not automatically place proprietary Reallexi application code under an open-source license.