Skip to content

Releases: ademisler/RunOnMine

RunOnMine v0.1.0-beta.1 — Public Beta

Pre-release

Choose a tag to compare

@ademisler ademisler released this 09 Aug 08:50
876c9ef

RunOnMine v0.1.0-beta.1 — Public Beta

RunOnMine's first public beta is ready for testing on macOS, Windows, and Linux.

Important

This is a public beta. The macOS build is ad-hoc signed but not Developer ID signed or notarized, and the Windows installer is not Authenticode signed. macOS Gatekeeper and Windows SmartScreen may therefore warn or block the downloaded app. Publisher signing and an independent external security review are planned hardening, but are not blockers for this beta.

Choose your download

Platform Recommended download Notes
macOS — Apple Silicon & Intel RunOnMine_0.1.0-beta.1_universal.dmg Universal app with arm64 + x86_64 slices
Windows x64 runonmine-desktop_0.1.0-beta.1_x64-setup.exe Current-user NSIS desktop installer
Linux x86_64 — Desktop runonmine-desktop_0.1.0-beta.1_amd64.deb Desktop app + RunOnMine binaries
Linux x86_64 — Headless runonmine_0.1.0-beta.1_amd64.deb CLI/agent/server use
Linux ARM64 — Headless runonmine_0.1.0-beta.1_arm64.deb ARM64 CLI/agent/server use

Portable unsigned archives and target-specific CycloneDX SBOMs are also attached for advanced/manual deployments.

What is RunOnMine?

RunOnMine lets AI clients use tools on your own machine while keeping local execution behind explicit security boundaries. It includes:

  • a local MCP endpoint and agent;
  • exact approval scoping for connector, tool, and argument identity;
  • selected-root filesystem controls;
  • process isolation, bounded output, and process-tree termination;
  • browser automation with private-network/SSRF protections;
  • connector support and optional Cloudflare Quick Tunnel integration;
  • Emergency Lock and audit-backed authorization state;
  • native desktop controls on macOS, Windows, and Linux.

Local HTTP remains loopback-only, disabled by default, and authenticated when enabled. Remote connectors do not bypass the remote safety ceiling.

Installation notes

macOS

Open RunOnMine_0.1.0-beta.1_universal.dmg and copy RunOnMine.app to Applications. This beta uses verified ad-hoc code signatures and hardened runtime, but it is not Apple Developer ID signed or notarized, so Gatekeeper behavior on quarantined downloads is expected to differ from a fully notarized release.

Windows

Run runonmine-desktop_0.1.0-beta.1_x64-setup.exe. The installer is unsigned in this beta, so Windows SmartScreen may show an unrecognized-publisher warning.

Linux

Install the DEB matching your architecture/use case with your normal package-management workflow. Headless and desktop packages intentionally conflict/replace one another so the installed package identity stays unambiguous.

Verify your download

Every release artifact has a matching .sha256 file. CycloneDX JSON SBOMs are included for the portable platform artifacts.

Example:

sha256sum -c <artifact>.sha256

Use the checksum sidecar whose filename matches the artifact you downloaded.

Release validation

This beta was frozen from source revision:

620aed5635c8e2ca428715e5da3089f4bbbf4585

The release candidate passed the required public-beta gates, including:

  • Linux quality and dependency policy;
  • macOS ARM64/Intel, Windows x64, and Linux ARM64 hosted platform CI;
  • fresh hosted artifact preflight across macOS, Windows, Linux x86_64/ARM64, and Linux desktop;
  • clean-install/reboot/uninstall acceptance on macOS, Linux, and Windows;
  • MCP initialization and an owner-approved tool execution with dangerous-action denial checks;
  • repository runner isolation and protected-main verification;
  • complete-history secret scanning and owner risk review.

Security and beta limitations

The following are known, explicitly disclosed beta limitations:

  • macOS Developer ID signing/notarization is not configured;
  • Windows Authenticode publisher signing is not configured;
  • an independent external security review has not yet been completed.

These limitations do not weaken RunOnMine's checked-in authorization boundaries, but they do affect operating-system publisher trust and the assurance level appropriate for a beta. Review the repository's Security and platform documentation before using RunOnMine in sensitive environments.

Feedback

Please report reproducible bugs, installation problems, platform-specific issues, and security concerns through the RunOnMine GitHub repository. When reporting a problem, include your OS/architecture and whether you used the desktop installer, DEB, or portable archive; do not include secrets or connector credentials.

Thanks for testing the first RunOnMine public beta.