Skip to content

v0.1.0-alpha.1

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Jul 00:31
· 52 commits to main since this release
v0.1.0-alpha.1
6ce2946

GuardianNode 0.1.0-alpha.1

Initial public alpha release for technical parents, developers, early
evaluators, and safety reviewers.

GuardianNode Alpha is a local-first safety-monitoring tool for technical parents
and early evaluators. The Windows 11 installers have been tested in the
documented install modes, including post-install detection verification. This is
alpha software. It may miss events, may produce false positives, and is not a
guarantee of child safety. It is not a replacement for parental involvement or
emergency services. Do not expose GuardianNode directly to the public internet.
Use only on devices and accounts you own or are legally responsible for.

Supported in this alpha

Deployment shape Status
Windows 11 all-in-one installer Supported public alpha path for technical parents
Windows 11 parent server installer Supported public alpha path for parent-owned server PCs
Windows 11 child-only installer Supported public alpha path when paired to a trusted parent server
Source-code evaluation Supported for contributors, security reviewers, and technically experienced testers
Backend bound to loopback Safest default alpha path
Separated private LAN/VPN deployment Advanced alpha path; explicit opt-in, trusted LAN/VPN/TLS required

Not supported

Deployment shape or claim Status
Finished consumer product for non-technical families Not supported
Production/stable deployment Not supported
Raw public-internet exposure Not supported
Guaranteed detection or guaranteed child safety Not supported
Tamper-proof, stealth, or forensic-evidence claims Not supported
Enterprise/commercial compliance use Not supported

Release artifacts

Artifact SHA-256 Notes
GuardianNodeChildSetup-0.1.0-alpha.1.exe b271dd24c448ac8c333f5c86548cac2d12c35a41c48de7193d62f376becb1fb7 Windows x64-compatible child/all-in-one installer
GuardianNodeServerSetup-0.1.0-alpha.1.exe 92314f7613341bd2ba47c34d96131f44e63126ef7cacd248f59642604fcf954f Windows x64-compatible parent server installer
Source archive Generated by GitHub from the v0.1.0-alpha.1 tag Verify the tag and commit before building locally

The Windows installers are unsigned in this alpha. Windows SmartScreen,
Defender, or other antivirus tools may warn about unsigned or PyInstaller-built
executables. Verify checksums from the official GitHub release before running
the installers.

Install

All Windows installer paths require administrator approval. Default backend
binding is local-first. Private LAN/VPN access is explicit and must not be
port-forwarded to the public internet.

Verify

After install:

  1. Open the parent dashboard.
  2. Confirm /api/health reports ok.
  3. Finish first-run setup with the one-time setup token.
  4. Confirm the child device appears under Devices.
  5. Confirm Model Status or Pipeline Health shows the expected text-only,
    vision, or full tier.
  6. Trigger a synthetic or known-safe test phrase and verify a risk event appears
    in the dashboard.

Stop, disable, and uninstall

  • Windows server installer: Start Menu -> GuardianNode Server -> Stop service.
  • Windows child/all-in-one installer: use the visible tray icon to pause
    monitoring, or uninstall from Windows Settings / Programs & Features as an
    administrator.
  • Logs are under C:\ProgramData\GuardianNode\logs\.
  • Troubleshooting and manual cleanup steps are in
    Troubleshooting.

Privacy

GuardianNode is local-first by default and does not send child data to a
GuardianNode-operated cloud. Current installer defaults capture visible screen
content; retained evidence can include sensitive screenshots, OCR text, app
names, window titles, URLs, names, and private messages. Evidence blobs and
collected event text are encrypted for parent/admin review, but the alpha does
not encrypt the entire SQLite database. Read
Privacy
before using the alpha.

Known limitations

  • It may miss risks and may false-alarm.
  • Text-only hardware does not detect visual-only risks such as image-only nudity,
    gore, or weapons.
  • Local model quality and speed vary by hardware and model choice.
  • Separated mode uses local-network HTTP unless you add HTTPS, Tailscale,
    WireGuard, or another trusted VPN/reverse proxy.
  • Unsigned installer reputation is not established.
  • A determined local administrator can disable or remove user-space monitoring.
  • Docker is a technical self-hosting path, not the primary Windows parent alpha
    install path.

Evidence

Release-readiness evidence and Windows installer validation are tracked in:

Feedback

Use GitHub Issues or Discussions for non-sensitive alpha feedback. Do not upload
child screenshots, private messages, evidence exports, pairing codes, device
tokens, setup tokens, or personal logs to public issues. Use the private
vulnerability reporting flow for exploitable vulnerabilities or child-data leaks.

Attached installer assets and SHA-256

Asset SHA-256
GuardianNodeChildSetup-0.1.0-alpha.1.exe b271dd24c448ac8c333f5c86548cac2d12c35a41c48de7193d62f376becb1fb7
GuardianNodeServerSetup-0.1.0-alpha.1.exe 92314f7613341bd2ba47c34d96131f44e63126ef7cacd248f59642604fcf954f
GuardianNodeLinuxServerInstaller-0.1.0-alpha.1.tar.gz 637ff52adcf800ebda51319e66eef76275f9ca9a219af6079280f3349604f2e4

The attached GuardianNode-0.1.0-alpha.1-SHA256SUMS.txt file contains these same hashes for command-line verification.

Assets 6
Loading