Open source · Apache-2.0 · Pure-Rust Wasm Core v3.3.0 · Engineering + ITIL v4 + CMDB

Engineering work and IT operations at the speed of your keyboard.

Synaxicraft unifies keyboard-first issue tracking, local-first WebAssembly CRDT sync, ITIL v4 service management, multi-hop CMDB blast radius, governed AI agents, and cryptographic ECDSA software control attestations in one workspace. A command palette reaches every action, single keys create and move work, and list navigation follows Vim-style keys.

Read the manual Full vendor comparison
⌘K command palette C create issue JK universal row nav G then D CMDB graph ? live keymap

Edge edition (v3.3.0): every workspace screen runs live on this Cloudflare deployment (D1, Workers AI, and the pure-Rust command core compiled to WebAssembly): issues, cycles, Portfolio Roadmaps, ITSM with semantic + BM25 knowledge search and business-hours SLA calendars, CMDB discovery and service mapping, DAG workflows, cost-metered autonomous AI agents, MCP/A2A, Cloud IDE, and ECDSA P-256 compliance attestations. Host-level POSIX shells and local TCP ports run in the self-hosted container edition.

WHY SYNAXICRAFT

Stop paying three per-seat bills to glue engineering to IT operations.

Most organizations bolt a fast issue tracker like Linear onto a heavy ITSM and CMDB suite like Jira Service Management or ServiceNow — severing incidents, CAB approvals, and CI blast radius from the code that ships fixes. Synaxicraft unifies both sides on one deterministic Rust + WebAssembly core under Apache-2.0.

1 WORKSPACE · UNIFIED GRAPH

Issues, cycles, incidents, CAB changes, and CMDB in one graph

Incidents, problems, changes, the service catalog, configuration items and their relationships live alongside engineering work, not in a separate tool. Track cycles, Portfolio Roadmaps, signed GitHub/GitLab webhooks, and Cloud IDE stacked reviews right beside business-hours SLA calendars, CAB blackout windows, and multi-hop CI blast radius.

Live modules: engineering · itsm · cmdb · discovery · ide

#![forbid(unsafe_code)]

Pure-Rust deterministic core & Wasm multi-view offline sync

Built with vanilla TypeScript, native Web Components, and a zero-dependency Rust command core compiled to WebAssembly on both the Cloudflare edge and the browser. A service worker serves the app shell offline, and writes made offline wait in an outbox, then replay idempotently when you reconnect. Multi-view IndexedDB snapshots hydrate Issues, Planning, ITSM, CMDB, and Compliance offline alongside per-row keyboard shortcuts across module tables.

Multi-view IndexedDB snapshot + Rust OR-Set CRDTs

HUMAN-IN-THE-LOOP P1 GATE

Governed, approval-gated & cost-metered AI agents

Workers AI agents ground recommendations in hybrid BGE dense semantic + BM25 RRF knowledge search, halt P1 or high-impact actions in human approval gates until a lead signs off, and meter real prompt/completion tokens and USD micro-costs against workspace budgets. Includes an Autonomous Agent UI, one-click tenant kill switch, SHA-256 hash-chained run ledger, and DAG workflows with Timer, Parallel, and Agent nodes.

Inspect AI governance in Ch. 8 →

APACHE-2.0 INCLUDED

Cryptographic ECDSA control attestations & zero SSO/audit tax

Never pay 3x per seat to unlock foundational security controls. OIDC PKCE single sign-on (RS256 & ECDSA P-256), 7-role RBAC, tamper-evident SHA-256 audit chains, per-tenant WebCrypto ECDSA P-256 software control attestations with public JWKS verification, GDPR DSAR export and Owner erasure, retention policies, and a live CycloneDX 3.3.0 SBOM ship in the open-source tree.

Software controls live · 0 external CPA/ISO audits

DATA CENTER 2029 EOL ALTERNATIVE

Sovereign Cloudflare edge or air-gapped Linux container

With Atlassian Data Center reaching end of life in March 2029 and modern trackers locked to vendor SaaS, sovereignty is built in. Deploy the edge edition into your own Cloudflare account with one script, or run the hardened OCI image on SQLite or PostgreSQL. Permissive Apache-2.0 licensing means zero copyleft AGPL traps.

Try the Self-Host Command Builder →

SHA-256 VERIFIED EXPORT

Cryptographic tenant portability between edge and container

Your operational graph is never held hostage. Export your complete tenant workspace with per-collection row counts and SHA-256 digests in a single API call, verify every table fail-closed, and deterministically replay your command and event history into a self-hosted PostgreSQL 16 or SQLite container with bit-for-bit parity.

Proven 336-event edge-to-container replay

ARCHITECTURAL CONTRAST

How Synaxicraft differs

Each incumbent below is strong at what it was built for. Here is how Synaxicraft compares structurally across licensing, self-hosting, engineering speed, ITIL depth, and compliance posture, based on verified vendor documentation on our full comparison & sources page.

INTERACTIVE MATRIX

Side-by-side capability comparison

Capability comparison using Harvey balls (0 to 4 quarters). Activate any cell to open its detailed engineering rationale and primary vendor citations on /compare.

Click any rating ball to inspect the cell-by-cell engineering rationale, rubric, and verified vendor sources on /compare →

Ratings represent the Synaxicraft authors' assessment of verified public vendor documentation accessed 2026-11-06. Column 9 (Compliance & audit controls) rates in-product software controls at 1/4–2/4 and independent third-party CPA/ISO certifications at 3/4–4/4 (Synaxicraft holds 0 external CPA/ISO certifications). Product names are trademarks of their respective owners.

DEPLOYMENT SOVEREIGNTY

Two editions, one Apache-2.0 codebase

Edge edition this site

  • Self-service sign-up and sign-in (__Host- session cookie + CSRF, Turnstile, OIDC PKCE)
  • Issues, cycles, projects, initiatives, relations, triage and GitHub links, plus Portfolio Roadmaps and GitLab webhooks
  • ITSM (incidents, problems, CAB changes, catalog, SLA) and CMDB/assets with blast radius, business-hours SLA calendars, and automated service mapping
  • Governed Cloudflare Workers AI assistant & Autonomous Agent UI with P1 human gates, kill switch, and real USD micro-cost metering
  • Cryptographic WebCrypto ECDSA P-256 control attestations + JWKS verifier, SHA-256 hash-chained audit log, GDPR DSAR/erasure, retention, CycloneDX 3.3.0 SBOM, and SHA-256 tenant backup
  • Hybrid BGE semantic + BM25 RRF knowledge base, signed Slack/Teams/email intake, time-boxed JIT access, and DAG workflows with Approval, Parallel, Timer, and Agent nodes
  • Cloud IDE (D1 virtual workspace, polyglot diagnostics, Jujutsu-style stacked reviews), SaaS connectors, MCP JSON-RPC 2.0, and A2A
  • Multi-view IndexedDB offline snapshot and idempotent CRDT outbox replay; no host POSIX shell or local TCP ports inside Workers isolates

Container edition self-hosted

  • Everything in the edge edition from the identical Rust + TypeScript tree
  • Host-level Cloud IDE: POSIX terminal, git/jj workspace providers, and local preview ports
  • Python stdlib host discovery agent (OS kernel, listening TCP/UDP ports, system services, packages)
  • Outbound webhooks, OAuth/OIDC SSO, and encrypted tenant backups on your own storage
  • SQLite or PostgreSQL 16 (TLS verify-full + SCRAM-SHA-256) in a hardened read-only rootless OCI image

Try the live edge edition or explore the docs

Create an account for your own isolated tenant workspace on this deployment, or inspect every shortcut, endpoint, and vendor citation first.

User's Manual Comparison & Sources

Welcome to Synaxicraft

At least 12 characters. Passphrases welcome; no composition rules.

You get a private workspace on this edge edition with the Member role. Sign-up is protected by Cloudflare Turnstile.