Personal knowledge OS

A vault that answers back.

A team of AI agents lives inside your notes. Fire a thought from anywhere — it comes back titled, linked, and filed. Nothing is written without your approval.

100% self-hosted4-lane triage0 unapproved writes
flowokr — chatpi online
you22:41via telegram
the pi fan curve fix worked — note it down somewhere sensible
keeper22:41draft staged
Drafted and linked to [[Raspberry Pi]] · [[Homelab]]
Hardware/pi-fan-curve-fix.md
→ committed to vault
The lineEvery thought rides the same rail — from capture to vault.
How it works

Nothing lands in your vault without your say-so.

Every capture moves through the same four gates — whether it arrives from Telegram or the web.

01Capture

Fire a thought

Send anything to the chat — Telegram or web. A link, a half-idea, a question. No formatting required.

02Triage

Aegis sorts it

Your gatekeeper agent routes each message into one of four lanes: chat, vault question, capture, or command.

03Stage

Keeper drafts it

Captures become proper notes — titled, tagged, wikilinked to what you already know — parked in staging.

04Commit

You approve

One tap to confirm, edit, or reject. Only then does vault_commit write to the real vault on your Pi.

Features

Your notes, with an operations team.

Ask your vault

Plain-language questions, answered from your own notes — with citations that jump straight to the source.

Capture that files itself

A stray thought becomes a named, foldered, wikilinked note — waiting in staging until you confirm.

Co-write in the browser

A real markdown editor with wikilink autocomplete, backed by the same index your agents use. Your writes land instantly — no staging.

Self-hosted

Runs at home. Stays at home.

Flowokr is a personal system, not a cloud service. The architecture has one rule: your vault's real files never leave your hardware.

you → telegram / web → agents on the pi → staging → your approvalvault
cloud holds a mirror · the pi holds the truth

The Pi is the source of truth

Your vault lives on a Raspberry Pi on your own network. The cloud only ever holds a mirror for rendering and search.

Nothing connects inward

The Pi never accepts inbound connections — it polls for work and pushes results back. There is no port to attack.

Every agent write is staged

Agents propose; you approve. No AI ever commits directly to your vault.

Gated at the edge

Everything behind the login sits behind Cloudflare Access before a request even reaches the app.

Your second brain, staffed.

One login. Five rooms. A vault that works while you don't.