Skip to content

Airlock v0.1.1

Pre-release
Pre-release

Choose a tag to compare

View all tags
@LouisonH LouisonH released this 31 Jul 09:45
· 65 commits to main since this release
v0.1.1
551af70

Airlock v0.1.1 - Technical Preview

Airlock v0.1.1 为 HTTP/Wget、SSH 与 LLM API 提供本地固定路由，把真实上游地址、账户密码和 API Key 留在受保护的本机存储中。

中文： 发布说明 · 安装指南 · 安全边界

Airlock v0.1.1 provides fixed local routes for HTTP/Wget, SSH, and LLM APIs while keeping real upstream addresses, account passwords, and API keys in protected local storage.

English: Release notes · Installation · Security boundaries

Highlights

  • Relay fixed HTTP/Wget targets with method, path, redirect, and Range controls.
  • Isolate SSH credentials with dual sessions, pinned host keys, custom local authentication, editable exact commands, optional unrestricted non-interactive exec, and local command audit.
  • Manage existing SSH mappings: replace protected hosts, customize local
    username-to-host selection, rotate local credentials, add or delete mappings,
    and run identity-aware health checks.
  • Record sanitized attempts against disabled routes and test the configured
    local proxy without exposing its protected URL.
  • Route OpenAI-compatible and Anthropic-compatible APIs through secondary local keys, model allowlists, output/rate/concurrency limits, streaming, and optional in-memory token totals.
  • Select Direct, Clash-compatible Proxy, or Auto egress per route.
  • Start new installations with the prompt-free Standard profile (0600 local file + loopback); opt into stricter macOS Keychain storage when appropriate.
  • Use a native themed desktop interface with explicit LAN and high-risk SSH confirmations.
  • Check public release versions on demand, use the embedded multilingual guide, and prepare matching static Pages documentation without automatic download or installation.
  • Filter routes by safe local metadata and run health checks only for the filtered result set; inspect installer and platform contracts through npm CLI status and doctor commands.

Download

This release supports Apple Silicon Macs running macOS 12 or newer. It does not include an Intel, Windows, or Linux package.

  • Airlock_0.1.1_aarch64.dmg for normal installation
  • Airlock_0.1.1_aarch64.app.zip as a portable archive
  • SHA256SUMS-v0.1.1.txt for integrity verification
644b7310e51ebbd2668a40ee95699194903f3d73347a6c071f2b4140bffefc9b  Airlock_0.1.1_aarch64.dmg
72e7bc174e53c901cbca9a52af92615bb4e44ff094d19d919a112cc66824125a  Airlock_0.1.1_aarch64.app.zip

Security Notice

This is a prerelease technical preview, not a production security claim. The application is ad-hoc signed but is not Apple Developer ID signed or notarized, so macOS may show an unidentified-developer warning. Verify SHA256SUMS-v0.1.1.txt and follow the installation guide before opening it.

v0.1.1 has automated Go, Rust, frontend, npm-package, signature, and checksum verification, but it has not completed an independent production security audit. Capabilities do not yet have TTL or one-time semantics. LAN mode must not be exposed to the public Internet, and unrestricted SSH exec should use a dedicated least-privilege upstream account.

Full changes are listed in the changelog.

Assets 5
Loading