Skip to content

Airlock v0.1.0 - Technical Preview

Pre-release
Pre-release

Choose a tag to compare

View all tags
@LouisonH LouisonH released this 30 Jul 05:49
· 68 commits to main since this release
v0.1.0
022dbf2

Airlock v0.1.0 - Technical Preview

Airlock 的首个可下载技术预览版现已发布。它为 HTTP/Wget、SSH 与 LLM API 提供本地固定路由，把真实上游地址、账户密码和 API Key 留在受保护的本机存储中。

中文： 发布说明 · 安装指南 · 安全边界

Airlock's first downloadable technical preview is now available. It provides fixed local routes for HTTP/Wget, SSH, and LLM APIs while keeping real upstream addresses, account passwords, and API keys in protected local storage.

English: Release notes · Installation · Security boundaries

Highlights

  • Relay fixed HTTP/Wget targets with method, path, redirect, and Range controls.
  • Isolate SSH credentials with dual sessions, pinned host keys, custom local authentication, editable exact commands, optional unrestricted non-interactive exec, and local command audit.
  • Route OpenAI-compatible and Anthropic-compatible APIs through secondary local keys, model allowlists, output/rate/concurrency limits, streaming, and optional in-memory token totals.
  • Select Direct, Clash-compatible Proxy, or Auto egress per route.
  • Start new installations with the prompt-free Standard profile (0600 local file + loopback); opt into stricter macOS Keychain storage when appropriate.
  • Use a native themed desktop interface with explicit LAN and high-risk SSH confirmations.

Download

This release supports Apple Silicon Macs running macOS 12 or newer. It does not include an Intel, Windows, or Linux package.

  • Airlock_0.1.0_aarch64.dmg for normal installation
  • Airlock_0.1.0_aarch64.app.zip as a portable archive
  • SHA256SUMS.txt for integrity verification
4d2424a1c63a70bbd97bc99577a1af41d24094ce7f3120f80f0f060be2eb94a2  Airlock_0.1.0_aarch64.dmg
1e12cd42ef8339a41181d72e8be6e4891e5aa692a95d7a13f328b19e0f8e8aec  Airlock_0.1.0_aarch64.app.zip

Security Notice

This is a prerelease technical preview, not a production security claim. The application is ad-hoc signed but is not Apple Developer ID signed or notarized, so macOS may show an unidentified-developer warning. Verify SHA256SUMS.txt and follow the installation guide before opening it.

v0.1.0 has automated race, unit, integration, frontend, Rust, lint, bundle, signature, DMG, and checksum verification, but it has not completed an independent production security audit. Capabilities do not yet have TTL or one-time semantics. LAN mode must not be exposed to the public Internet, and unrestricted SSH exec should use a dedicated least-privilege upstream account.

Full changes are listed in the changelog.

Assets 5
Loading