Skip to content

Airlock v0.1.4

Choose a tag to compare

View all tags
@LouisonH LouisonH released this 31 Jul 14:21
· 53 commits to main since this release
v0.1.4
3ade109

Airlock v0.1.4 - Production-Readiness Security Release

Released: July 31, 2026

English | 简体中文 | 日本語

Security changes

  • Upgrade golang.org/x/crypto to v0.52.0, remediating the reachable SSH
    vulnerabilities identified in the prior dependency version.
  • Bound simultaneous SSH connections and sessions, preventing a reachable SSH
    listener from consuming unbounded core resources.
  • Bound simultaneous HTTP response streams across the gateway. LLM routes keep
    their additional per-route requests-per-minute and concurrency limits.
  • Complete a maintainer-run production-readiness security audit. Read the
    audit record for scope, validation, and
    remaining operating boundaries.

Verification

  • Airlock_0.1.4_aarch64.dmg
  • Airlock_0.1.4_aarch64.app.zip
  • SHA256SUMS-v0.1.4.txt
f137dade553d2ba174e747fb21b041f42d079188efec948b7c55dd0b7bc21d51  Airlock_0.1.4_aarch64.dmg
f331d3b285ce1a91aebcc18382f9f2503bfc34e4c327b97c8914a964ed76fbce  Airlock_0.1.4_aarch64.app.zip

go vet ./...
go test -race ./...
go run golang.org/x/vuln/cmd/govulncheck@latest ./...

The desktop and npm installer production dependencies were also checked with
npm audit --omit=dev.

Release boundary

This is still a macOS Apple Silicon technical preview. The audit was performed
by the maintainers; it is not an independent third-party certification. The
application remains ad-hoc signed and not Apple-notarized. Use the Keychain
Strict profile for same-user hostile-process resistance, keep LAN ingress
private, and use a least-privilege upstream SSH account.

See the security policy, installation guide,
and changelog.

Assets 5
Loading