Olivares AI v26.8.0

The first public release of Olivares AI — a self-hosted platform to run and govern the AI agents you already use. One static Go binary with the web console embedded; SQLite for a single node, Postgres with enforced row-level security for multi-tenant; runs on Linux, Docker, Kubernetes, and fully air-gapped.

It gives agents durable work items with fenced leases, enforces access policy at four deny-closed points, reconstructs your access map out of band from audit signals, and writes every decision to a hash-chained, Ed25519-signed audit ledger.

---

What ships in v26.8.0

• 30 modules and 158 integrations — coding agents (Claude Code at the hook, Codex, Grok Build, gemini-cli, Cursor, opencode, goose, cline, OpenHands and more), model providers, SIEMs, and infrastructure. Each connector states what it can enforce versus only observe.
• Governance: Cedar policies (RBAC + deny-overlay + scoped grants), two-person approvals, a kill switch whose re-enable requires dual control. Four deny-closed enforcement points — each one counts only while a test drives its unconfigured path and asserts the refusal.
• Evidence: append-only audit ledger with signed checkpoints; exports to CEF, LEEF, syslog, OTLP and OCSF; at-least-once push to Splunk HEC, Microsoft Sentinel, Datadog, New Relic, or any HMAC webhook.
• 26 compliance framework catalogs and a FinOps view over models from four vendors (36 model families in the reference catalog).
• Privacy posture: no mandatory telemetry, no control-plane egress by default. The single vendor call is olivares upgrade, and --endpoint points it at your own mirror. No remote kill switch. No seat cap in the engine.

Install

Container images (registry tags carry no v prefix):

docker pull ghcr.io/olivaresai/olivares:26.8.0     # or docker.io/olivaresai/olivares:26.8.0

FIPS and STIG variants: ghcr.io/olivaresai/olivares:26.8.0-fips · :26.8.0-stig

Homebrew (macOS and Linux):

brew install olivaresai/tap/olivares

Linux packages (.deb, .rpm, .apk) and binary archives for linux/darwin, amd64/arm64 — including FIPS builds — are attached below.

Try it in five minutes with the synthetic demo estate (loopback-only, no real data):

./olivares serve --seed-demo --insecure --listen 127.0.0.1:8901 \
  --grpc-listen 127.0.0.1:8902 --data-dir "$(mktemp -d)"
# open http://127.0.0.1:8901 — inventory, work, access map + drift, policies, FinOps

Verify what you download

Every artifact is signed (cosign, keyless), carries SLSA build provenance, and ships SPDX and CycloneDX SBOMs. One script checks all of it, offline if you prefer:

scripts/verify-release.sh                    # keyless / Sigstore
scripts/verify-release.sh --key cosign.pub --offline

The checksums.txt is signed; release-commit.txt pins the exact source commit of this build.

Honest limits

This is a beta and the first tagged release. The honesty & limits page says plainly what is live and what is design-only — shadow mode and final authority are not built; messages are scoped to orchestration workflows by an enforced boot test. Windows binaries are not built. The hosted Cloud tier is coming, and is not part of this release.

Closed frontier models are not self-hostable — the governance and observation plane is. Models you genuinely self-host keep the whole path inside your network.

Licensing

Open core: AGPL-3.0 for the engine, modules and web console; Apache-2.0 for the SDK, connectors and client libraries. Commercial add-ons are additive code built only with -tags enterprise and absent from this binary — nothing here is feature-capped from within. Enterprise terms: enterprise@olivares.ai.

Links

Documentation · README · Security policy · Discussions

Source commit: f443e0844dff6259679cc7b1e020058d467a0927 · full commit history