Trigix
GitHub

OPEN SOURCE · SELF HOSTED · POLICY CONTROLLED

Automation that reaches the desktop without losing control.

Design workflows on a visual canvas, run them on a Rust execution engine, and connect approved actions to Windows and macOS devices. Every privileged step stays bounded by identity, policy, approval, and audit.

Check desktop availability Deploy the platform
Execution
Async Rust DAG
Library
180 node types
Control
Tenant scoped

PLATFORM

One graph from intent to evidence.

Compose AI, integrations, data transforms, and control flow in one versioned workflow. Execute in parallel, retry deliberately, and inspect every run.

01

Visual authoring

Canvas editing, typed contracts, reusable workflows, and an assistant for bounded authoring tasks.

02

AI building blocks

LLM, RAG, agent, MCP, speech, embedding, rerank, and structured output nodes.

03

Operational control

RBAC, tenant isolation, encrypted credentials, approvals, audit logs, metrics, and traces.

04

Portable deployment

Run locally, with Docker Compose, or on Kubernetes through the published Helm chart.

TRIGIX DESKTOP

Local control stays local and interruptible.

AUTOMATION

Semantic actions, not blind replay.

Trigix resolves windows and accessible controls, rejects protected fields, verifies focus, and stops when selectors are stale or ambiguous.

Read the safety model

VOICE

Consent first.

The microphone starts only after a local action. Voice can propose work, but it cannot approve or execute desktop actions by itself.

AVATAR

Presentation only.

The built-in avatar reflects conversation state. It cannot access credentials, approve tools, or operate the computer.

DESKTOP RELEASES

Download only what can be verified.

Official installers are published as immutable GitHub Release assets with a matching SHA-256 checksum. Community and self-managed builds use their distributor's identity, qualification, updates, security response, and support.

RELEASE STATUS

Checking signed desktop releases...

Querying the public GitHub Releases feed.

WindowsWindows 11 Pro or Enterprise 24H2 and 25H2, x64
macOSCurrent and previous GA major, Apple Silicon and Intel
VerifySHA-256 checksum, publisher signature, and platform trust checks

Windows ARM64, Windows 10, locked sessions, Session 0, and cross-user desktops are outside the Official Trigix boundary. macOS requires Accessibility permission for automation. Independent distributors define and support their own clearly identified matrix.

Installation and verification guide Distribution and GA responsibility

OPERATE WITH CONFIDENCE

Public guidance from first launch to incident response.

01
Desktop onboardingInstall, pair, permissions, automation, voice, avatar, update, and uninstall
OPEN 02
TroubleshootingRecovery paths, accessibility guidance, and known limitations
OPEN 03
Support policyIntake, severity, response targets, escalation, and security handoff
OPEN 04
SecurityPrivate vulnerability reporting and coordinated disclosure
OPEN 05
Privacy and data boundariesWebsite, platform, desktop, voice, telemetry, and retention
OPEN 06
Distribution responsibilityOfficial GA, Community Builds, and self-managed distributions
OPEN 07
Questions and feedbackCommunity help, product feedback, and implementation discussion
OPEN

START WITH THE PLATFORM

Run Trigix on infrastructure you control.

helm install trigix oci://ghcr.io/bj-qizhi/charts/trigix \
  --version 0.3.6 --namespace trigix --create-namespace
Full quick start Architecture