AI Workbench v1.6.0

AI Workbench v1.6.0

What's Changed

Added

• [ADD] Release archives are now cryptographically signed (zipsign, SEC-01 Half 1). The release.yml workflow signs every .tar.gz/.zip with an ed25519 key before publishing (signature embedded in the archive — no sidecar, signed archives still extract normally) and verifies each one against the committed public key signing/ai-workbench-pub.bin in CI. The private key lives only as the ZIPSIGN_PRIVATE_KEY GitHub Actions secret. Client-side verification is intentionally NOT enabled yet — per the SECURITY-NOTES.md rollout order, the next 2–3 releases ship signed first so existing self-updates keep working; enabling self_update's .verifying_keys() (Half 2) will be a later major release.

Downloads

Platform	Architecture	Download
Linux	x64	ai-workbench-x86_64-unknown-linux-gnu.tar.gz
Linux	ARM64	ai-workbench-aarch64-unknown-linux-gnu.tar.gz
macOS	Apple Silicon (M1/M2/M3/M4)	ai-workbench-aarch64-apple-darwin.tar.gz
macOS	Intel	ai-workbench-x86_64-apple-darwin.tar.gz
Windows	x64	ai-workbench-x86_64-pc-windows-msvc.zip
Windows	ARM64	ai-workbench-aarch64-pc-windows-msvc.zip

Installation

Homebrew (macOS / Linux):

brew install eqms/ai-workbench/ai-workbench

Unix (Linux/macOS):

# Download and extract
tar xzf ai-workbench-*.tar.gz
chmod +x ai-workbench
./ai-workbench

Windows:

# Extract zip and run
Expand-Archive ai-workbench-*.zip -DestinationPath .
.\ai-workbench.exe

Auto-Update

AI Workbench includes built-in auto-update functionality. Updates are checked automatically on startup.

See README for full documentation.