Visca

The open foundation · MPL 2.0

The open foundation that makes self-hosting real.

A self-hosted stack is only trustworthy if you can see what runs inside your walls. Lattice Runtime is the open substrate beneath every Visca product — open specifications, a reference runtime in Rust, SDKs in four languages, a conformance suite. Read it, fork it, run a conformant runtime yourself, ship Lattice-compatible bundles, or build on top and compete with Visca. The license guarantees you are never locked in.

What it is

The protocol surface of autonomy — open, so the stack can run inside your walls.

Lattice Runtime defines, at the protocol level, what an autonomous actor is and how it interacts with the world. Five open specifications. A reference implementation. SDKs and conformance. Because the substrate is open, the whole self-hosted stack is auditable and reproducible inside your perimeter. Visca's products are reference implementations of these specifications, plus commercial extensions for scale, federation, and enterprise integration.

The five specifications

Bundle Format

Immutable, content-addressable, signed artifact containing everything an autonomous actor needs to execute — including, for embodied actors, firmware, weights, and behavior trees.

Sigil Identity Schema

Cryptographic identity for autonomous actors. Keypair plus principal, runtime, lineage, and (for embodied) hardware attestation.

Capability Grant Protocol

How autonomous actors request scoped, time-bound, audited authority — and how that authority is vended as an ephemeral credential.

Plexus Wire Protocol

Capability-based discovery, mTLS rooted in Sigil identities, and agent-aware routing across actors, tools, MCP servers, and embodied actuators.

Audit Envelope

Canonical format for an action record. Sigil-keyed, cryptographically chained, signed by the observing runtime. The wire format every audit emitter targets.

The covenant

Pre-BSL HashiCorp values, written into the foundation.

Self-hosting only protects you if the foundation can never be pulled out from under you. The relationship between Visca, Lattice Runtime, the developer community, and our customers is governed by a covenant that constrains Visca's behavior in perpetuity. It predates revenue, predates funding, and is structurally enforced through licensing, governance, and scope discipline.

Licensing

MPL 2.0 reference runtime. Apache 2.0 SDKs and conformance suite. CC BY 4.0 specifications. Fixed at v0.1, forever. Never relicensed under BSL, SSPL, Elastic License, FSL, or any other restrictive or source-available license.

Foundation donation

Once the project reaches an adoption threshold defined in the charter, Lattice Runtime will be donated to a neutral software foundation. The donation makes relicensing legally impossible by Visca or any successor.

DCO, never CLA

Contributions are accepted under the Developer Certificate of Origin. No contributor license agreement is required, and none may be added retroactively. The contributor base is a collective rights-holder by design.

No paywall walkbacks

A feature shipped in Lattice may never be moved behind the Visca commercial paywall. Every such feature's history is auditable in the repository's commit log.

No rent-seeking on the substrate

Visca's commercial model captures value through operational excellence in delivering Lattice at production scale — never through restrictions on the substrate itself.

The covenant is published in full at the project's governance repository and may be amended only with the consent of the foundation that holds Lattice Runtime.

Read the whitepaper

Why the whole stack belongs inside your walls — the complete reference.

An architectural and positioning document covering the autonomy problem, the Visca approach, the stack's eight primitives across three planes, the self-hosted and air-gapped deployment models, the integrations, and the covenant in full.

The whole stack. Self-hosted. One ecosystem.

The entire agent stack, inside your own walls.

Models, identity, tools, voice, payments, runtime, and audit — as one integrated ecosystem, self-hosted, sovereign, air-gapped. Nothing stitched from vendors. Nothing leaves your perimeter. Open at the core. No license rug-pulls, ever.